Security Scan: https://morad-2a537.firebaseapp.com/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e15261c6-a40c-402f-ad54-6f4a1bdbbb8b Domain and IP registration (RDAP)/api/v1/rdap/e15261c6-a40c-402f-ad54-6f4a1bdbbb8bHow often this domain was scanned/api/v1/domain/stats/morad-2a537.firebaseapp.com Scan history for this domain/api/v1/domain/history/morad-2a537.firebaseapp.com?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://morad-2a537.firebaseapp.com/

Effective URL:

https://votreremboursementimpos.com/

Redirected

AI Security Verdict

Moderate Risk

Confidence: 63%

Risk Score

Anonymous Firebase subdomain silently redirects to an unreachable 'tax refund' lure domain with no disclosed owner. No forms or malware were observed, but the redirect chain is deceptive and unverifiable — avoid.

Risk Factors (4)

Off-domain redirect from an anonymous hosting-platform subdomain to an unrelated, cryptically named destination

Destination hostname is a deceptive tax-refund lure that resolves to nothing (unreachable/possibly withdrawn infrastructure)

Complete absence of any identifiable operator, contact details, or brand disclosure across the redirect chain

Destination domain carries no age, ranking or ownership evidence to corroborate legitimacy

Safety Factors (5)

No credential, password or payment fields were present in the submitted page (verified form counts all zero)

No JavaScript malware patterns, no obfuscated scripts, no third-party script hosts, and no cross-origin credential exfiltration detected

No threat-intelligence matches, no network IDS alerts and no kit-roster identification against the captured page

The 502 error was the scanning proxy's own page, not content served by the destination, so it is not weighed as a signal

No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'morad-2a537.firebaseapp.com' is registered; it also runs on subdomain 'morad-2a537'. The second-level label 'firebaseapp' is 11 characters long split between 5 vowels and 6 consonants. Tokenizing the label suggests 3 words: fire, base, app. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.12s

Total Load Time

1 KB

Total Size

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
4	1	-	-

Detected Technologies4

Meta-Refresh-Redirect

100%

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: morad-2a537.firebaseapp.com