Security Scan Report: www.cerc-mq.fr

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 5 domains to perform 18 HTTP transactions. The main domain is cerc-mq.fr and was registered 2 years 9 months ago.

Submitted URL: https://www.cerc-mq.fr/wp-includes/spp/sp/redirect/p/

AI Security Verdict

High Risk

Confidence: 93%

8
Risk Score

Compromised WordPress page on cerc-mq.fr impersonating Spotify with a fake 'Connection Secure' robot check to gate account access — brand impersonation phishing infrastructure; avoid.

Risk Factors (5)
Impersonation of Spotify on a non-Spotify, unrelated domain (cerc-mq.fr)
Compromised WordPress installation abused for phishing (wp-includes path)
Fake security/captcha verification gate soliciting action 'to access your account dashboard'
Hidden bot-detection fields (js_check, mouse_moved) consistent with a phishing kit
Inconsistent IP/secure-node claims on the page typical of kit-generated content
Domain age information unavailable

Details

Page Title

Spotify - Security Verification

Scan Type

public

Domain Name Analysis

The domain name 'www.cerc-mq.fr' uses the French country-code top-level domain (.fr); it also runs on subdomain 'www'. The second-level label 'cerc-mq' is 7 characters long with 1 vowel and 5 consonants; bonus characters include one hyphen. Breaking it apart gives four words: cer, c, m, q. Expect 1 character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

= Spotify Connection Secure Confirm you are not a robot to access your account dashboard. IP: 141,98.255.249 | Secure Node: Active | not a robot & reCAPTCHA CONTINUE

Page Load Overview

0.83s
Total Load Time
1.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:215 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software61% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
61%
entertainment media
57%
documentation technical
56%
adult content
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4145.239.37.162Paris, Île-de-France, France
AS16276OVH SAS
2142.251.152.119Google · CDNUnited States
AS15169Google LLC
2142.251.14.95Google · CDNUnited States
AS15169Google LLC
2142.250.154.94Google · CDNUnited States
AS15169Google LLC
2142.251.110.94Google · CDNUnited States
AS15169Google LLC
2142.251.157.119Google · CDNUnited States
AS15169Google LLC
2142.251.150.119Google · CDNUnited States
AS15169Google LLC
2142.251.154.119Google · CDNUnited States
AS15169Google LLC
188--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D002C96616B31412A817D27027B7B7497532B107F783C9683EACA360DFCA9E6C46279C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:nkwyF6TJfPWuoWutCqnkPEK1oEvLQY0ALbJnBa7AIjMOyn0YP1iwb6cK5:k0fuuCQoksIo+QmvJ71iwbY5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8602:ABEQsERmACiEAOBCZAiVDDpcQAAJcQikUMqIKAJCQYKlg0wJEAA/DhwHzDiwI6DK2kxwKIuZgAgAIciIwARSIClWhMAwKh1Q

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:efc3dbc3dbdbc3ff
Perceptual Hash:ec643399333399cc
Difference Hash:0814144c14324c08
Wavelet Hash:27031303d3dbc3c3
Color Hash:N/A

Other Hashes

Crop Resistant:0814144c14324c08

Scan History

Scan history not available

Unable to load historical scan data