Security Scan: https://mon-espaceclient-carrefour.web.app/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3e25930d-9092-4e20-8e1d-8834807374a0 Domain and IP registration (RDAP)/api/v1/rdap/3e25930d-9092-4e20-8e1d-8834807374a0How often this domain was scanned/api/v1/domain/stats/mon-espaceclient-carrefour.web.app Scan history for this domain/api/v1/domain/history/mon-espaceclient-carrefour.web.app?limit=15

This website contacted 3 IPs in 1 country across 4 domains to perform 6 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://mon-espaceclient-carrefour.web.app/

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Fake 'Carrefour Banque' security page on a free Firebase subdomain, using OTP/card-reactivation and account-blocking threats to lure customers — brand impersonation phishing, no verified form on this capture.

Risk Factors (5)

Impersonation of Carrefour Banque (French bank) on a non-official Firebase-hosted subdomain

Social-engineering flow instructing victims to submit an SMS one-time code, a card reactivation step, and a 3-minute expiry — phishing-kit pacing

Threatening warning of account debit suspension to force compliance

Unranked domain on a shared/instant-publishing platform; page age cannot be established (apex age is not attributable)

Low business-legitimacy score (8/100) despite the official-looking bank branding

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Favicon Hash

MMH3: -1511086877

MD5: c6b6704c0f6e5202bbe6fd6bb298bc79

Domain Name Analysis

You're looking at domain 'mon-espaceclient-carrefour.web.app' on the application-focused generic top-level domain (.app), featuring subdomain 'mon-espaceclient-carrefour'. Its registrable label 'web' stretches across 3 characters containing 1 vowel alongside 2 consonants. Word splitting yields one word: web. No strong language cues emerged from the frequency lists.

Screenshot

Garrefour <(& banque eE assurance CARREFOUR BANQUE Cher(e) client(e) Veuillez activer ou la réactiver le nouveau Cle sécure car, il comporte des correctifs de sécurité importants contre la fraude e...

Page Load Overview

1.09s

Total Load Time

64 KB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:55%

Script:Latin

Direction:ltr

Detection Details

Text Length:719 chars

Detector Agreement:100%

Website Classification

Primary Category

phishing scam45% confidence

Type: static

Method: ml+structural

All Detected Categories

phishing scam

45%

finance banking

42%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
2	172.64.152.97Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.35.159Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	3	-	-