Summary
API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/47acb0c9-fa28-41c3-885e-a4eb77245cd7Domain and IP registration (RDAP)/api/v1/rdap/47acb0c9-fa28-41c3-885e-a4eb77245cd7How often this domain was scanned/api/v1/domain/stats/mcdonalds-a39a2.web.appScan history for this domain/api/v1/domain/history/mcdonalds-a39a2.web.app?limit=15This website contacted 1 IP in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is web.app and was registered 7 years ago.
Submitted URL: https://mcdonalds-a39a2.web.app/
Effective URL: Redirected
https://mesimpots-remboursement.com/
AI Security Verdict
Moderate Risk
Confidence: 70%
5
Risk Score
Brand-mismatched Firebase subdomain (McDonald's) that redirects to a tax-refund domain imitating France's impots.gouv.fr — a refund-lure phishing pattern; the destination was unreachable so no form was seen.
Risk Factors (4)
Brand name (McDonald's) used in a free hosting subdomain with no relation to the brand, then redirected away — deceptive hostname used as a lure
Cross-domain redirect to a tax-refund-themed domain imitating the French tax authority's naming
Hosting-platform subdomain whose creation date is unknown — not attributable to the underlying platform's age
Automated page classifier labelled the content 'phishing scam' (context only, not scored)
Safety Factors (5)
No credential or payment form was captured on the reachable page (0 forms, 0 password fields, 0 payment fields)
No Indicators of Compromise matched against the page or its resources
No JavaScript malware patterns, no high-precision hunting-rule hits, no network IDS alerts
All scripts (none contacting third parties) came from the site's own domain; no cross-origin credential exfiltration
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable
Details
Page Title
N/A
Scan Type
public
Domain Name Analysis
The domain 'mcdonalds-a39a2.web.app' uses the application-focused generic top-level domain (.app) with subdomain 'mcdonalds-a39a2'. The core label 'web' covers 3 characters containing one vowel alongside 2 consonants. Breaking it apart gives 1 word: web. No strong language cues emerged from the frequency lists.
Screenshot
Page Load Overview
0.21s
Total Load Time
1 KB
Total Size
Domain & IP Information
| Requests | IP Address | Location | AS Autonomous System |
|---|---|---|---|
| 4 | 199.36.158.100Fastly · CDN | United States | AS54113Fastly, Inc. |
| 4 | 1 | - | - |
Detected Technologies4
Content Similarity HashesFor malware variant detection
Image Hashes
Perceptual Hashes
Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A
Other Hashes
Crop Resistant:N/A
Scan History
Scan history not available
Unable to load historical scan data