Security Scan Report: ndscarrefdspv.firebaseapp.com

Redirected to:
https://masvitecarrefpshvt.info/?pwd=carrefour
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://ndscarrefdspv.firebaseapp.com/

Effective URL:
https://masvitecarrefpshvt.info/?pwd=carrefour
Redirected

AI Security Verdict

Moderate Risk

Confidence: 78%

5
Risk Score

Firebase throwaway subdomain redirects to an unrelated .info host carrying '?pwd=carrefour' — a brand-token phishing redirect pattern; landing page currently failing (502). Treat as a phishing lure.

Risk Factors (5)
Redirect from a user-controlled Firebase hosting namespace to an unrelated .info domain
'pwd=carrefour' query parameter using a third-party retail brand on a domain that is not Carrefour's
Landing host masvitecarrefpshvt.info is unranked and of unknown age
ET PHISHING network alert corroborates the redirect pattern
Phishing-scam classification from the content analyzer
Safety Factors (4)
No forms, password fields or payment fields present in the captured DOM
No JavaScript malware patterns and no cross-origin credential exfiltration observed
No threat-intelligence Indicators of Compromise matched
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 5
Domain age information unavailable

Details

Page Title

502 Bad Gateway

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'ndscarrefdspv.firebaseapp.com' is registered and includes subdomain 'ndscarrefdspv'. The second-level label 'firebaseapp' is 11 characters long containing five vowels alongside 6 consonants. Tokenizing the label suggests three words: fire, base, app. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ndscarrefdspv.firebaseapp.com/

Page Load Overview

0.25s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:64%
Script:Latin
Direction:ltr

Detection Details

Text Length:84 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam65% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

phishing scam
65%
adult content
41%
news media journalism
38%
real estate property
34%
government public service
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
31--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B5E0A3DF6A4030524281520C9587F02DDC57ECE8A4D9C074C9D257450E19325E176FA6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:AAkM8iWgLirxHQciI0NaMXz7XxhuPqWFoAho8n:AAkM1WgpcEVXvtW7hz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:30912121636bb03f2e8a31e17313cbbb

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fffffffffffffff
Perceptual Hash:870707070f0f1f3f
Difference Hash:c000000000000000
Wavelet Hash:30f0f0f0f0f0f0f0
Color Hash:#b7bf40

Other Hashes

Crop Resistant:c000000000000000

Scan History

Scan history not available

Unable to load historical scan data