ScanMalware.com

Security Scan Report: creditdunord-session.firebaseapp.com

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1f2c8f7d-929d-40dd-8404-c3d5d18529adDomain and IP registration (RDAP)/api/v1/rdap/1f2c8f7d-929d-40dd-8404-c3d5d18529adHow often this domain was scanned/api/v1/domain/stats/creditdunord-session.firebaseapp.comScan history for this domain/api/v1/domain/history/creditdunord-session.firebaseapp.com?limit=15
This website contacted 3 IPs in 2 countries across 3 domains to perform 4 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://creditdunord-session.firebaseapp.com/

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Phishing page impersonating Crédit du Nord on a firebaseapp.com subdomain, using a fake DSP2 account-limitation notice to push users to a CONNEXION button and steal banking credentials.

Risk Factors (5)
Impersonation of a different entity's brand (Crédit du Nord) on a non-official domain
Manufactured urgency and threat of account limitation to pressure interaction
Phishing pretext built on payment-services directive (DSP2) 'verification'
Free shared-hosting subdomain (firebaseapp.com) with unknown tenant creation date
Unranked domain reputation
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'creditdunord-session.firebaseapp.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'creditdunord-session'. The registrable portion 'firebaseapp' spans 11 characters with 5 vowels and 6 consonants. Segmentation suggests 3 words: fire, base, app. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://creditdunord-session.firebaseapp.com/

Page Load Overview

0.91s
Total Load Time
12 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:55%
Script:Latin
Direction:ltr

Detection Details

Text Length:757 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking42% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
42%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1158.191.169.79France
AS9159Credit Agricole SA
1213.186.33.17France
AS16276OVH SAS
43--

Detected Technologies4

WordPress
75%
HTTP/3
40%
HSTS
40%
Firebase
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17F32EFDA93534A190454B0E1EAF24FDA3073536FEA3025A9ABBC73BEF44C56848517BC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:NP6arHP6mcXHPe7vwXPP6Ec0P6FHPe7kwX8HPe7LwX2PO17bP6IwXOP6VP6SwXo4:NP6IHP6moHPOgP6EtP6FHPO6HPOPPO1J

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11699:jAGBkBYAgkgADRMAJgQhZxMACAShArYKMAoQCAYF8LCkwwBqC6AnCAGiEkJspKePLSUImIDQCBgBAqErACSRAJoCAF0REs8G

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfcfe7e7e7cfffff
Perceptual Hash:b3339999662699cc
Difference Hash:18181c0c0c181000
Wavelet Hash:cfcfc3c300043c3c
Color Hash:#87a7c5

Other Hashes

Crop Resistant:18181c0c0c181000

Scan History

Scan history not available

Unable to load historical scan data