Security Scan Report: pouracquisconf-fr.firebaseapp.com

Redirected to:
https://fr-pro-notif-info-fr.duckdns.org/ac-besancon/index.html
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 1 HTTP transaction. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://pouracquisconf-fr.firebaseapp.com/

Effective URL:
https://fr-pro-notif-info-fr.duckdns.org/ac-besancon/index.html
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

French academic login page ('Connexion', /ac-besancon/) served from a free duckdns subdomain via a firebase redirect, with the backend pointing at an IP flagged as a malware sinkhole — a phishing shape; do not enter credentials.

Risk Factors (5)
Brand impersonation of a French education authority (ac-besancon) on a non-official duckdns.org domain
Hosted on a free dynamic-DNS subdomain commonly abused for phishing
Cross-domain redirect from firebaseapp.com to duckdns.org with an unknown-age/tenant-controlled host
Threat-intel match (2 feeds) on the IP the page attempts to connect to, reported as a malware sinkhole
Login-themed page ('Connexion') presented via a broken proxy backend rather than legitimate content
Domain age information unavailable

Details

Page Title

Connexionother network

Scan Type

public

Domain Name Analysis

Domain 'pouracquisconf-fr.firebaseapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'pouracquisconf-fr'. The core label 'firebaseapp' covers 11 characters split between 5 vowels and 6 consonants. Word splitting yields 3 words: fire, base, app. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pouracquisconf-fr.firebaseapp.com/

Page Load Overview

0.23s
Total Load Time
0 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-fr
Text Length:9 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
0192.169.69.26United States
AS27323Wowrack.com
12--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E7D1424E05A30075A72341B187E93A113E75A8135B05FC9A3D9F197C8F89BC946E33BD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:ig4ecjRawcjRaJC7JaM7paJhaEOkJfiMGEh1BfSHAxpeVRRl:ig4G

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6496:Ig0NDAiQQMiYcAAkiCRGkQkUBICMpyMAYJRMAQEAihBkIPhUDGlYAmEdEIlAGhAECSOGgJmkTEQ4GhgRINOQAcBASAAJhCoi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffe7ffffff
Perceptual Hash:e699992666999966
Difference Hash:0000000008000000
Wavelet Hash:0f0f0f0f242c3030
Color Hash:#40b0bf

Other Hashes

Crop Resistant:0000000008000000

Scan History

Scan history not available

Unable to load historical scan data