Security Scan: https://fr-notificationsecu.firebaseapp.com/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1a63c5a7-20be-4e2a-8433-8d1ed1721139 Domain and IP registration (RDAP)/api/v1/rdap/1a63c5a7-20be-4e2a-8433-8d1ed1721139How often this domain was scanned/api/v1/domain/stats/fr-notificationsecu.firebaseapp.com Scan history for this domain/api/v1/domain/history/fr-notificationsecu.firebaseapp.com?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://fr-notificationsecu.firebaseapp.com/

Effective URL:

https://connectauthentificationsecu.nl/fr-Wetransfer/

Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

Risk Score

Firebase front page that only bounces visitors to a look-alike 'authentication/security' .nl domain with a WeTransfer-branded path. Deceptive naming and hidden destination outweigh the absence of a harvesting form on the entry page — avoid.

Risk Factors (4)

Deceptive hostnames built from security/authentication wording on two different domains

Cross-domain redirect from a free hosting subdomain to an unrelated .nl domain

URL path mimics the WeTransfer brand on a non-official domain

Unknown-age shared-hosting tenant with no reputation (not in Cisco Umbrella top 1M)

Safety Factors (6)

No credential, password or payment fields on the submitted page (0 forms parsed)

No threat-intelligence matches, no hunting rule malware patterns, no known-kit roster hit

No JavaScript behavioral signals and no cross-origin credential exfiltration

The single Suricata alert is INFO-level, heuristic and explicitly non-corroborated

No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'fr-notificationsecu.firebaseapp.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'fr-notificationsecu'. The core label 'firebaseapp' covers 11 characters holding five vowels versus six consonants. It segments into 3 words: fire, base, app. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Domain does not exist

There was no DNS record for connectauthentificationsecu.nl when we scanned it, so there is no screenshot.

Page Load Overview

0.19s

Total Load Time

1 KB

Total Size

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
3	1	-	-

Detected Technologies4

Meta-Refresh-Redirect

100%

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: fr-notificationsecu.firebaseapp.com