Security Scan: https://yolusem-goiglecom.firebaseapp.com/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7dd6c4ae-e522-4db6-b83b-cb3e46495398 Domain and IP registration (RDAP)/api/v1/rdap/7dd6c4ae-e522-4db6-b83b-cb3e46495398How often this domain was scanned/api/v1/domain/stats/yolusem-goiglecom.firebaseapp.com Scan history for this domain/api/v1/domain/history/yolusem-goiglecom.firebaseapp.com?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://yolusem-goiglecom.firebaseapp.com/

Effective URL:

https://de.ihrkosten-gehaltskont-erhalten.shop/

Redirected

AI Security Verdict

Moderate Risk

Confidence: 72%

Risk Score

Google-lookalike Firebase subdomain redirects to a German 'receive your salary account' lure domain; currently a 502 error. Deceptive hostname and redirect pattern indicate phishing infrastructure, though no forms rendered.

Risk Factors (4)

Deceptive hostname imitating google.com on a shared Firebase subdomain

Cross-domain redirect from a hosting-platform subdomain to an unrelated .shop domain with a phishing-styled name

Destination domain is unranked and its registrable-domain age could not be determined

Page is a broken 502 error implying an abandoned or taken-down lure infrastructure

Safety Factors (5)

No forms of any kind (0 password, 0 payment, 0 total) in the captured DOM

No threat-intelligence matches, no JavaScript malware patterns, no network IDS alerts

No JavaScript behavioral signals or cross-origin credential exfiltration detected

No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'yolusem-goiglecom.firebaseapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'yolusem-goiglecom'. The core label 'firebaseapp' covers 11 characters holding 5 vowels versus 6 consonants. Tokenizing the label suggests 3 words: fire, base, app. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page did not load

The browser never reached this site, so there is no screenshot of it.

Page Load Overview

0.32s

Total Load Time

1 KB

Total Size

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
3	1	-	-

Detected Technologies4

Meta-Refresh-Redirect

100%

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: yolusem-goiglecom.firebaseapp.com