Security Scan Report: mtpost-id2871.firebaseapp.com

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 3 domains to perform 7 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://mtpost-id2871.firebaseapp.com/

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Disposable Firebase redirect stub matching a vetted phishing kit family (firebase-codeanywhere-redirect); it funnels visitors to a random Codeanywhere container used for banking/postal/tax phishing. Destination currently times out. Treat as malicious.

Risk Factors (4)
Identified as part of an analyst-vetted phishing kit (Firebase → Codeanywhere redirect stubs used for bank/postal/customs phishing in Europe)
Randomised container hostname and numeric subdomain naming typical of disposable phishing infrastructure
No genuine content — pure redirect stub on shared hosting
Unranked domain in Cisco Umbrella with no legitimate reputation
Domain age information unavailable

Details

Page Title

szkhzkszkhsknsbz-jeromallan745912.codeanyapp.comother network

Scan Type

public

Domain Name Analysis

The domain 'mtpost-id2871.firebaseapp.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'mtpost-id2871'. Count 11 characters in 'firebaseapp' split between 5 vowels and 6 consonants. Segmentation suggests three words: fire, base, app. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mtpost-id2871.firebaseapp.com/

Page Load Overview

N/A
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:840 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software70% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
70%
documentation technical
41%
adult content
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
2151.101.0.64Fastly · CDNUnited States
AS54113Fastly, Inc.
2198.199.109.95San Francisco, California, United States
AS14061DigitalOcean, LLC
03--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14A048F773296063986558498E05B43099F30B543F50AC8BCB9BCBAD9BFDED06107BB78

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:C/Qho9PKBbl8Vrq9Jzbs6tlg1ySBKw4Q9gcoIsPs2bMy8OldY:jhoCl8Bqzzbs6okSCggcpsE2eAu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:188263:+QiDAUkCh4I4SWiKhIAkSL0gIRQKMFA0+gDgUJWAAQyIgpAWrAAwOHKDpEBECRlJg2ySBC2BIJEBhieQBewBoJKQFEABeZg6

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc7c3d3ffffff
Perceptual Hash:b1339ecccc933364
Difference Hash:00181c1c16000000
Wavelet Hash:fcdcc0c4c0fcf0f0
Color Hash:#40a4bf

Other Hashes

Crop Resistant:00181c1c16000000

Scan History

Scan history not available

Unable to load historical scan data