Security Scan: https://mplimpo-16300.web.app/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/017f9a53-7f5e-4936-b57d-2c86ffc3ff96 Domain and IP registration (RDAP)/api/v1/rdap/017f9a53-7f5e-4936-b57d-2c86ffc3ff96How often this domain was scanned/api/v1/domain/stats/mplimpo-16300.web.app Scan history for this domain/api/v1/domain/history/mplimpo-16300.web.app?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://mplimpo-16300.web.app/

Effective URL:

https://fr.versouples.site/?pwd=carrefour

Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

Risk Score

Throwaway Firebase subdomain is a bare redirector to unrelated fr.versouples.site, whose URL appends a password parameter with the Carrefour brand name — a phishing-lure shape. Destination never loaded; no forms or malware seen on the entry page.

Risk Factors (4)

Free/instand hosting subdomain used purely as a redirector to an unrelated domain

Redirect lands on an unrelated, unranked .site domain with no apparent relationship to the entry host

Password-style query parameter 'pwd' combined with a retailer brand name ('carrefour') on a non-official domain

No legitimate site content on the submitted page — only a redirect stub

Safety Factors (6)

Verified form facts: 0 forms, 0 password fields, 0 payment fields on the captured page

No Indicators of Compromise matched against the page or its resources

No JavaScript malware patterns, no native-hunting-rule hits and no known malicious kit in the roster

No cross-origin credential exfiltration and no third-party script hosts

No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'mplimpo-16300.web.app' uses the application-focused generic top-level domain (.app) with subdomain 'mplimpo-16300'. Its registrable label 'web' stretches across 3 characters with 1 vowel and two consonants. Tokenizing the label suggests one word: web. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Domain does not exist

There was no DNS record for fr.versouples.site when we scanned it, so there is no screenshot.

Page Load Overview

0.33s

Total Load Time

1 KB

Total Size

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
3	1	-	-

Detected Technologies4

Meta-Refresh-Redirect

100%

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: mplimpo-16300.web.app