Security Scan: https://comp-vab.web.app/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f6b315bf-7e31-4549-acee-ce7a308526a9 Domain and IP registration (RDAP)/api/v1/rdap/f6b315bf-7e31-4549-acee-ce7a308526a9How often this domain was scanned/api/v1/domain/stats/comp-vab.web.app Scan history for this domain/api/v1/domain/history/comp-vab.web.app?limit=15

This website contacted 3 IPs in 2 countries across 3 domains to perform 6 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://comp-vab.web.app/

AI Security Verdict

Moderate Risk

Confidence: 80%

Risk Score

Anonymous Firebase subdomain serving a French 'update your banking information' regulatory pretext with a login button and no identifiable operator - a phishing lure page. Do not enter any credentials.

Risk Factors (5)

Deceptive KYC/'update your customer information' pretext addressed to banking customers

No company name, imprint, or contact information anywhere on the page

Subdomain creation date unknowable on a shared hosting platform (could be minutes old)

Unranked in Cisco Umbrella and absent from any recognizable financial brand's official domains

Safety Factors (6)

No credential, password, or payment fields present on this page (0 forms verified)

No JavaScript malware patterns, obfuscation, or credential exfiltration detected

No network IDS alerts and no Google Safe Browsing / hunting-rule hits

No forms or cross-origin form submissions, so no direct data capture on this page

No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no hunting rule / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 8 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Favicon Hash

MMH3: 1056642367

MD5: 89078f84c905ecea5f553a1039dca1e9

Domain Name Analysis

The domain name 'comp-vab.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'comp-vab'. The core label 'web' covers 3 characters split between 1 vowel and two consonants. Tokenizing the label suggests 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.57s

Total Load Time

14 KB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

Text Length:5,265 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking72% confidence

Type: static

Method: ml+structural

All Detected Categories

finance banking

72%

corporate business

36%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
2	158.191.172.151	France	AS9159Credit Agricole SA
2	80.12.38.130	Saint-Maurice, Île-de-France, France	AS3215Orange
6	3	-	-