Security Scan: https://connexion-document.firebaseapp.com/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/50335db5-9c22-4d4e-ae44-99ca4ba8aa87 Domain and IP registration (RDAP)/api/v1/rdap/50335db5-9c22-4d4e-ae44-99ca4ba8aa87How often this domain was scanned/api/v1/domain/stats/connexion-document.firebaseapp.com Scan history for this domain/api/v1/domain/history/connexion-document.firebaseapp.com?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://connexion-document.firebaseapp.com/

Effective URL:

https://fr-franceinfnotiauth.ru/Connexiondocumentenligne/

Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

Risk Score

Broken phishing-style redirect: a free firebaseapp.com page forwards to an unrelated .ru host whose name and /Connexiondocumentenligne/ path mimic a French auth/brand login. No forms served (502), but the infrastructure is deceptive — avoid.

Risk Factors (5)

Cross-domain redirect from a throwaway firebaseapp.com subdomain to an unrelated .ru host

Deceptive hostname pattern (franceinf…auth) imitating a French brand/authentication service, with the login-implying path /Connexiondocumentenligne/

Network IDS flagged a possible phishing redirect

Backend unreachable — a dormant/broken phishing landing page; the operator can bring credential forms live at any time

Shared-hosting subdomain whose true creation date cannot be established; no reputation data for the final domain

Safety Factors (5)

No verified credential, password or payment form was present in the captured DOM (0 forms)

No JavaScript malware patterns, no high-precision hunting-rule hits, no known-kit match

No Indicators of Compromise matched against the page or its resources; no cross-origin credential exfiltration observed

No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain 'connexion-document.firebaseapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'connexion-document'. Its registrable label 'firebaseapp' stretches across 11 characters split between five vowels and six consonants. Breaking it apart gives three words: fire, base, app. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page did not load

The browser never reached this site, so there is no screenshot of it.

Page Load Overview

0.41s

Total Load Time

1 KB

Total Size

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
3	1	-	-

Detected Technologies1

Meta-Refresh-Redirect

100%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: connexion-document.firebaseapp.com