Security Scan: https://yolusem-goiglecom.firebaseapp.com/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b1c24af8-a3a1-467a-9db5-a889fdeabe87 Domain and IP registration (RDAP)/api/v1/rdap/b1c24af8-a3a1-467a-9db5-a889fdeabe87How often this domain was scanned/api/v1/domain/stats/yolusem-goiglecom.firebaseapp.com Scan history for this domain/api/v1/domain/history/yolusem-goiglecom.firebaseapp.com?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://yolusem-goiglecom.firebaseapp.com/

Effective URL:

https://de.ihrkosten-gehaltskont-erhalten.shop/

Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

Risk Score

Redirect-only firebaseapp.com page with a Google-mimicking subdomain forwarding visitors to an unrelated, deceptively named German .shop lure domain that served no verifiable content. No forms or threat-intel hits, but the chain has no legitimate purpose.

Risk Factors (4)

Deceptive hostname on shared free hosting: 'goiglecom' string imitates google.com on a firebaseapp.com tenant

Cross-domain redirect from a throwaway-looking hosting subdomain to an unrelated, deceptively named '.shop' domain with a German 'get your money/salary account' lure name

Redirect-only page with no substantive content — pure traffic-forwarding shape typical of phishing delivery chains

Destination domain unreachable/unverifiable, so no legitimate business identity behind the redirect can be confirmed

Safety Factors (5)

No credential or payment form present in the captured HTML

No Indicators of Compromise, hunting rule malware patterns, network IDS alerts or JavaScript credential-exfiltration behaviour detected

Redirecting across domains is ordinary behaviour on its own (link shorteners, marketing moves), and the destination failing to load is neither proof of safety nor of malice

No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain 'yolusem-goiglecom.firebaseapp.com' uses the commercial generic top-level domain (.com) with subdomain 'yolusem-goiglecom'. Its registrable label 'firebaseapp' stretches across 11 characters split between five vowels and six consonants. It segments into three words: fire, base, app. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Domain does not exist

There was no DNS record for de.ihrkosten-gehaltskont-erhalten.shop when we scanned it, so there is no screenshot.

Page Load Overview

0.92s

Total Load Time

1 KB

Total Size

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
3	1	-	-

Detected Technologies4

Meta-Refresh-Redirect

100%

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: yolusem-goiglecom.firebaseapp.com