Security Scan Report: bpostceles.firebaseapp.com

Redirected to:
https://fr.pbotalesce.shop/
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://bpostceles.firebaseapp.com/

Effective URL:
https://fr.pbotalesce.shop/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Redirect from a free Firebase subdomain to fr.pbotalesce.shop, a domain whose name is a permutation of 'bpostceles' (bpost), ending in a 502 error. Nothing malicious was actually served — suspicious naming and redirect infrastructure only, no forms or IoCs.

Risk Factors (4)
Cross-domain redirect from a throwaway free-hosting subdomain to an unrelated .shop domain with no apparent relationship
Deceptive-looking hostname: 'pbotalesce' is an anagram/permutation of 'bpostceles', evoking the bpost postal brand on a non-official domain
Destination domain is unranked in Cisco Umbrella and of unknown age — infrastructure with no history
Final endpoint is non-functional (502 Bad Gateway), consistent with short-lived, churning throwaway hosting
Safety Factors (5)
No credential, login or payment form present anywhere on the page
No JavaScript behavioral signals, no cross-origin credential exfiltration, all scripts same-origin (in fact no scripts observed)
No threat-intelligence matches against the page or its resources
No JavaScript malware patterns or native YARA hits; no known malicious kit in the roster
No brand name, logo or login UI displayed — only a generic server error page
Domain age information unavailable

Details

Page Title

502 Bad Gateway

Scan Type

public

Domain Name Analysis

You're looking at domain 'bpostceles.firebaseapp.com' on the commercial generic top-level domain (.com) and includes subdomain 'bpostceles'. Its registrable label 'firebaseapp' stretches across 11 characters split between five vowels and six consonants. Segmentation suggests 3 words: fire, base, app. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bpostceles.firebaseapp.com/

Page Load Overview

0.35s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:64%
Script:Latin
Direction:ltr

Detection Details

Text Length:84 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam65% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

phishing scam
65%
adult content
41%
news media journalism
38%
real estate property
34%
government public service
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
31--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T195E02BEF6A4030A611817109A54AF05DEC97D8E8A49A8174C8D2664A1F14229B9F6BA3

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:4FAkM8JSHxHAtbaMXz7XxhuPqWFoAho8f:4FAkM7iVXvtW7hD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:8422c79be65e1e57f26d468bb80c060e

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fffffffffffffff
Perceptual Hash:870707070f0f1f3f
Difference Hash:c000000000000000
Wavelet Hash:30f0f0f0f0f0f0f0
Color Hash:#b72dd2

Other Hashes

Crop Resistant:c000000000000000

Scan History

Scan history not available

Unable to load historical scan data