Security Scan Report: authgrup.web.app

Redirected to:
https://communaute.chorus-pro.gouv.fr/documentation/deposer-un-lot-de-...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 3 domains to perform 72 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://authgrup.web.app/

Effective URL:
https://communaute.chorus-pro.gouv.fr/documentation/deposer-un-lot-de-...
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Firebase subdomain authgrup.web.app carries Chorus Pro/French government branding and is flagged as phishing by two feeds, then off-redirects to the genuine gouv.fr site; no form captured, but the entry URL is untrustworthy.

Risk Factors (5)
Phishing threat-intel match on the scanned primary domain authgrup.web.app, corroborated by two independent feeds
Chorus Pro / French Ministry of Economy branding displayed on a non-official .web.app hostname (brand impersonation)
Unranked, free-tier hosting subdomain of unknown creation age used to front a government login brand
Off-domain redirect from the branded entry URL to the genuine gouv.fr site
Scanner-vs-client content mismatch (challenge page vs. real login page) on an already phishing-flagged host
Domain age information unavailable

Details

Page Title

Connexion | Chorus Pro

Scan Type

public

Domain Name Analysis

You're looking at domain 'authgrup.web.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'authgrup'. Count 3 characters in 'web' with 1 vowel and 2 consonants. It segments into 1 word: web. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Ex MINISTERE, DE L'ÉCONOMIE, Agence pour l'informatique DES FINANCES sport ET DE LA SOUVERAINETÉ financière de l'État INDUSTRIELLE ET NUMÉRIQUE CA Veuillez patientez pendant le chargement de la pa...

Page Load Overview

2.52s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:275 chars
Detector Agreement:75%

Website Classification

Primary Category

government public service61% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
61%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
24199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
2451.91.204.101France
AS16276OVH SAS
2451.254.231.113France
AS16276OVH SAS
723--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16372C8A256D8103E42224183F692A55D6B65C00FF30B29A4FABC89EC7FDBEC75417D8D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:bUlFMm9QQNQtdT/TLjedT/TLjedT/TLjedT/TLjedT/TLjjvJRDSKT8XteQD3A0U:bUlFMmUZeZeZeZeZjvJRDSKTatnD3AgA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:16461:oQRwEQEQDHAgAAQ0iRoIEDIIOJgJCGhaRDMAAIxobGKIYAiRQk0kPx6BCTMFBLBIgWlGADKdQCYLpEKAoBikVCAKSBI1EGIk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9fbfe7e7ff97929e
Perceptual Hash:bfa21c0cb13ee1cc
Difference Hash:38200c4c00653238
Wavelet Hash:8f8de7c7e700818e
Color Hash:07007000000

Other Hashes

Crop Resistant:38200c4c00653238

Scan History

Scan history not available

Unable to load historical scan data