Security Scan: https://mon-espaceclient-carrefour.web.app/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3940280f-475d-4b2a-9b40-fe012ae86964 Domain and IP registration (RDAP)/api/v1/rdap/3940280f-475d-4b2a-9b40-fe012ae86964How often this domain was scanned/api/v1/domain/stats/mon-espaceclient-carrefour.web.app Scan history for this domain/api/v1/domain/history/mon-espaceclient-carrefour.web.app?limit=15

This website contacted 3 IPs in 1 country across 4 domains to perform 6 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://mon-espaceclient-carrefour.web.app/

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Fake Carrefour Banque page on a free web.app subdomain urging victims to 'reactivate' their secure key and bank card and enter an SMS code — brand impersonation phishing; do not interact.

Risk Factors (5)

Brand impersonation of Carrefour Banque on a domain unrelated to Carrefour

Free/shared hosting subdomain (web.app) with brand name embedded — typical phishing kit deployment; actual page creation date unknown

Social-engineering flow requesting an SMS one-time code and bank-card reactivation (credential/payment data harvesting lure)

Urgency and threat of account/debit suspension to force compliance

Domain not present in Cisco Umbrella top 1M despite claiming to be a major bank

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Favicon Hash

MMH3: -1511086877

MD5: c6b6704c0f6e5202bbe6fd6bb298bc79

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'mon-espaceclient-carrefour.web.app' is registered and includes subdomain 'mon-espaceclient-carrefour'. The registrable portion 'web' spans 3 characters containing 1 vowel alongside 2 consonants. Tokenizing the label suggests 1 word: web. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Carrefour <@W@> banque et assurance CARREFOUR BANQUE Cher(e) client(e) Veuillez activer ou la réactiver le nouveau Cle sécure car, il comporte des correctifs de sécurité importants contre la fraude...

Page Load Overview

0.73s

Total Load Time

64 KB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:55%

Script:Latin

Direction:ltr

Detection Details

Text Length:719 chars

Detector Agreement:100%

Website Classification

Primary Category

phishing scam45% confidence

Type: static

Method: ml+structural

All Detected Categories

phishing scam

45%

finance banking

42%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
2	104.18.35.159Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.64.152.97Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	3	-	-