Security Scan Report: qontomsg01.firebaseapp.com

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 2 domains to perform 3 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://qontomsg01.firebaseapp.com/

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Bank phishing page impersonating Qonto on a free Firebase subdomain, using fake account-suspension warnings to push users into a 'contract unblock' flow. No form on this capture, but clear brand impersonation and social engineering.

Risk Factors (5)
Brand impersonation of Qonto bank on a non-official domain
Urgent account-suspension threat language designed to pressure the victim
Hosted on a free, instantly provisioned Firebase hosting subdomain with unknown creation date
No legitimate site ownership/reputation signals despite claiming to be a bank
Phishing-style landing page (verified form facts show no form on this capture, so the harvest likely occurs after a click-through)
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'qontomsg01.firebaseapp.com' uses the commercial generic top-level domain (.com) with subdomain 'qontomsg01'. The registrable portion 'firebaseapp' spans 11 characters containing five vowels alongside six consonants. Breaking it apart gives 3 words: fire, base, app. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://qontomsg01.firebaseapp.com/

Page Load Overview

0.49s
Total Load Time
3 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:455 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking62% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
62%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
123.207.210.139Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
123.207.210.132Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
33--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T136E16610FBE0264A7465896093A67FF62F79011747014DB479DD32749F8DAA20673BFC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:njaEUxD26AnBQs+ejauLPvTdt1vlw7AZO:nja3+++DTZva

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7147:CBEEASiYBQBBEiAjI0EBASGYDQQFYIAFmAWDhFhYaiNCGLphEsgXAaCBEZxCCgOAQhgYHAHEYBAiAAZQYBkCQiBBQkKNEgoC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7c7c7ffffffffff
Perceptual Hash:b13131cececece30
Difference Hash:0c1e1c0010000000
Wavelet Hash:c0c4c0fcf0f0f0f0
Color Hash:#6653ac

Other Hashes

Crop Resistant:0c1e1c0010000000

Scan History

Scan history not available

Unable to load historical scan data