Security Scan Report: fr-mercdeu.firebaseapp.com

Redirected to:
https://fr.jfeursctlem.online/ctelem/
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://fr-mercdeu.firebaseapp.com/

Effective URL:
https://fr.jfeursctlem.online/ctelem/
Redirected

AI Security Verdict

Low Risk

Confidence: 65%

2
Risk Score

Cross-domain redirect to an unrelated .online host, but final page is only a 502 error with no forms, malware, or threat-intel hits; low risk, but avoid entering data until it resolves.

Risk Factors (2)
Cross-domain redirect from a free Firebase subdomain to an unrelated .online domain
Final destination returned a 502 Bad Gateway error with no substantive content
Safety Factors (4)
No credential or payment forms detected (0 forms, 0 password fields, 0 payment fields)
No Indicators of Compromise matched the page or loaded resources
No JavaScript malware or YARA patterns detected
No cross-origin credential exfiltration or JavaScript behavioral signals
Domain age information unavailable

Details

Page Title

502 Bad Gateway

Scan Type

public

Domain Name Analysis

The domain name 'fr-mercdeu.firebaseapp.com' uses the commercial generic top-level domain (.com) with subdomain 'fr-mercdeu'. The core label 'firebaseapp' covers 11 characters holding five vowels versus six consonants. Word splitting yields three words: fire, base, app. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fr-mercdeu.firebaseapp.com/

Page Load Overview

0.25s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:64%
Script:Latin
Direction:ltr

Detection Details

Text Length:84 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam65% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

phishing scam
65%
adult content
41%
news media journalism
38%
real estate property
34%
government public service
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
31--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B5E0A3DF2A00305541C261099546F04CE893C8EC60998074CC911A4D1F15319B4F6BB2

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:A0gYs0kMRJlKIODAKJmmHAEFddaMXeKP1qbKZgIhSAhuPoljQ6s1foAljo8n:AAkM8PAexHA2baMXz7XxhuPqWFoAho8n

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:5e3f7b40996e8063b02e9affb56e53c7

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fffffffffffffff
Perceptual Hash:870707070f0f1f3f
Difference Hash:c000000000000000
Wavelet Hash:30f0f0f0f0f0f0f0
Color Hash:#d279cc

Other Hashes

Crop Resistant:c000000000000000

Scan History

Scan history not available

Unable to load historical scan data