ScanMalware.com

Security Scan Report: formasproperties.eu

Redirected to:
https://login.salesforce.com/?locale=fr
Submitted: Apr 24, 2026, 3:34:13 PMCompleted: Apr 24, 2026, 3:35:24 PMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 3 countries across 3 domains to perform 1 HTTP transaction. The main domain is login.salesforce.com and was registered NaN years ago.

Submitted URL: https://formasproperties.eu/

Effective URL: https://login.salesforce.com/?locale=frRedirected

AI Security Verdict

Low Risk

Confidence: 82%

2
Risk Score

The site pretends to be a Salesforce login page, collects credentials on a mismatched domain – high‑risk phishing.

Risk Factors
Brand impersonation
Credential collection on unrelated domain
Unranked / low‑reputation domain
High number of eval() calls
Safety Factors
Form posts to the legitimate Salesforce login endpoint (no obvious exfiltration)
Domain age > 10 years (well‑established)
Page served from an identity-provider sign-in endpoint (login.salesforce.com); a relying-party brand and login form here are normal SSO, not impersonation — risk clamped from 7 to 2
Domain age information unavailable

Details

Page Title

Connexion | Salesforce

Scan Type

public

Language

🇫🇷

French

(80% confidence)

Category

social_media

(50%)

Domain Information

The domain 'formasproperties.eu' uses the .eu country-code top-level domain without a subdomain. Its registrable label 'formasproperties' stretches across 16 characters with 6 vowels and 10 consonants. It segments into 3 words: form, as, properties. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://formasproperties.eu/

Page Load Overview

1.04s
Total Load Time
87
HTTP Requests
7
Domains
2.9 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:fr
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:fr
Text Length:784 chars
Detector Agreement:80%

Website Classification

Primary Category

social_media50% confidence
Type: webapp
Method: structural

All Detected Categories

social_media
50%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2923.36.162.222Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
29160.8.239.2London, England, United Kingdom
AS14340Salesforce.com, Inc.
29188.114.96.3United States
AS13335Cloudflare, Inc.
873--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14F5250F75D214C270203C5ADBCD2FB8C606FC32E074A9E98A7AD06676787F98447097A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:r3zAgJalxDBm8xyR1a4MIFmotvmi1Xyr/0jWdOpWJA76OpRsXj:T3JadmwvKmoo/4WdOpWJC6yiT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14345:cEwARgAGaYIwgQV8JMQIgxgMUJFiQQAAkkQKEdIChSQhEnoBj+QiCBAPCAIUNhyhLEhagEAfSGCYAIgAMNAEZgYD6UmMXYYh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f090f0f09090f0f0
Perceptual Hash:ee66e03c61e3c1c3
Difference Hash:2726a42424242424
Wavelet Hash:f0b0f8f89090f0f0
Color Hash:#938f1f

Other Hashes

Crop Resistant:2726a42424242424

Scan History

Scan history not available

Unable to load historical scan data