Security Scan Report: proposal-soumission.firebaseapp.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 5 domains to perform 17 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://proposal-soumission.firebaseapp.com/

AI Security Verdict

High Risk

Confidence: 84%

8
Risk Score

Corroborated phishing report on this firebaseapp domain plus a document-preview lure behind a Cloudflare gate and sibling SharePoint/OneDrive lookalike hosts — treat as an active phishing chain.

Risk Factors (4)
Multi-source phishing threat-intel match on the primary domain
Sibling hostnames in the same campaign impersonate SharePoint/OneDrive branding
Document-preview lure with a bot-filtering Turnstile gate on an anonymous free hosting subdomain
Unranked, non-attributable domain age on shared hosting namespace
Domain age information unavailable

Details

Page Title

Document Preview

Scan Type

public

Domain Name Analysis

You're looking at domain 'proposal-soumission.firebaseapp.com' on the commercial generic top-level domain (.com); it also runs on subdomain 'proposal-soumission'. The registrable portion 'firebaseapp' spans 11 characters holding five vowels versus 6 consonants. Word splitting yields three words: fire, base, app. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security check failed. Please refresh. Protected by Cloudflare Turnstile

Page Load Overview

0.61s
Total Load Time
2.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:136 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software48% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
48%
documentation technical
44%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
2142.251.127.95Google · CDNUnited States
AS15169Google LLC
2142.251.13.94Google · CDNUnited States
AS15169Google LLC
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1146.75.121.137Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
176--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C9A2E83B246704232513A1A67BA366057F2540073947E96BBB9E830CAFDDB99D8137F8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:fZi5MLuIHH2BfXvEyWY+aSZzgAyeI426e5:g5ML3HH2BfTXSe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:21931:CYIQMmBYJhKKRg5QQChAAKhgBZICDRDIuCwMAEKKB4FAC0EsVcA7CBAIiQgDJldLAEiBqRBhaBQEJXC4t0ikFI1cgJtQgCBa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffc3c3c3ffff
Perceptual Hash:b18bce243393ccce
Difference Hash:0000000e0e160000
Wavelet Hash:0c0cff8181c33f3f
Color Hash:07600030000

Other Hashes

Crop Resistant:0000000e0e160000

Scan History

Scan history not available

Unable to load historical scan data