Security Report: authgrup.firebaseapp.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/991f8c19-fc74-4202-84f4-d01ff3e87155 Domain and IP registration (RDAP)/api/v1/rdap/991f8c19-fc74-4202-84f4-d01ff3e87155How often this domain was scanned/api/v1/domain/stats/authgrup.firebaseapp.com Scan history for this domain/api/v1/domain/history/authgrup.firebaseapp.com?limit=15

This website contacted 3 IPs in 2 countries across 3 domains to perform 72 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://authgrup.firebaseapp.com/

Effective URL:

https://communaute.chorus-pro.gouv.fr/documentation/deposer-un-lot-de-...

Redirected

AI Security Verdict

High Risk

Confidence: 65%

Risk Score

Free firebase subdomain flagged as phishing serves a fake Chorus Pro / French government 'Connexion' page (impersonation) with bot-protection evasion; no credential form captured, but the lure profile is high-risk.

Risk Factors (5)

Phishing threat-intel report on the primary scanned domain (single-source, unverified)

Free firebaseapp.com hosting subdomain with unknown creation age (could be brand new)

French government / Chorus Pro branding presented on a non-government firebaseapp.com domain

Scanner-vs-client content mismatch consistent with bot-protection evasion on a phishing lure

Domain age information unavailable

Details

Page Title

Connexion | Chorus Pro

Scan Type

public

Favicon Hash

MMH3: -914577672

MD5: 8733cb19189fc225916c4f93322ae208

Domain Name Analysis

The domain name 'authgrup.firebaseapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'authgrup'. Count 11 characters in 'firebaseapp' with five vowels and six consonants. Word splitting yields three words: fire, base, app. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.37s

Total Load Time

1.1 MB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr

Text Length:275 chars

Detector Agreement:75%

Website Classification

Primary Category

government public service61% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

government public service

61%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
24	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
24	51.91.204.101	France	AS16276OVH SAS
24	51.254.231.113	France	AS16276OVH SAS
72	3	-	-

Detected Technologies3

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15C72B8A256D8103E42224183F692A55D6B65C00FF30B29A4FABC89EC7FDBEC75417D8D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:bUlFMm9QQNQtdT/TLjedT/TLjedT/TLjedT/TLjedT/TLjjvJRDSKTVXteQD3A0U:bUlFMmUZeZeZeZeZjvJRDSKTxtnD3AgA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:16478:H0goZwwQDDAiQASwCQIFAoJYEMtgkDgAxhNCAA5oBSaBaQjTIl0uEZxBEHMsCZMoKGgBgQSMQDuYEMqZIBggQOAYUgMEHkQE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9fbfe7e7ff97929e

Perceptual Hash:bfa21c0cb13ee1cc

Difference Hash:38200c4c00653238

Wavelet Hash:8fb1e7c7e700818e

Color Hash:#b7bf40

Other Hashes

Crop Resistant:38200c4c00653238

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: authgrup.firebaseapp.com