Security Scan: https://fr-mirabelles-89d18.web.app/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/74612977-aa7b-44cf-b55e-f59edb052494 Domain and IP registration (RDAP)/api/v1/rdap/74612977-aa7b-44cf-b55e-f59edb052494How often this domain was scanned/api/v1/domain/stats/fr-mirabelles-89d18.web.app Scan history for this domain/api/v1/domain/history/fr-mirabelles-89d18.web.app?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://fr-mirabelles-89d18.web.app/

Effective URL:

https://afr.nomcfeurosg.online/Sgya/?pwd=ad

Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

Risk Score

Bare Firebase redirector forwarding to a randomised .online domain with a 'pwd' parameter; an ET PHISHING redirect alert corroborates it. Destination was unreachable, so treat as an unverified phishing gateway.

Risk Factors (5)

Entire page function is an unexplained cross-domain redirect to a random-looking .online domain

Destination URL carries a 'pwd' parameter and obscured path casing typical of credential-capture or cloaking chains

ET PHISHING redirect signature corroborated by the observed redirect behaviour

Anonymous free-hosting tenant subdomain with unknown creation date used purely as a redirector

No branding, disclosure or explanation for why visitors are being forwarded elsewhere

Safety Factors (6)

No credential, password or payment form present on the submitted page (verified form counts all zero)

No JavaScript malware or hunting-rule patterns detected

No threat-intelligence matches against the scanned page or its resources

No brand impersonation detected on the captured page

No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'fr-mirabelles-89d18.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'fr-mirabelles-89d18'. Its registrable label 'web' stretches across 3 characters containing one vowel alongside 2 consonants. Word splitting yields one word: web. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page did not load

The browser never reached this site, so there is no screenshot of it.

Page Load Overview

0.51s

Total Load Time

1 KB

Total Size

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
3	1	-	-

Detected Technologies4

Meta-Refresh-Redirect

100%

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: fr-mirabelles-89d18.web.app