ScanMalware.com

Security Scan Report: fr-mercdeu.web.app

Redirected to:
https://fr.jfeursctlem.online/ctelem/
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4ce1a44a-b456-49b2-9482-107f2f630a20Domain and IP registration (RDAP)/api/v1/rdap/4ce1a44a-b456-49b2-9482-107f2f630a20How often this domain was scanned/api/v1/domain/stats/fr-mercdeu.web.appScan history for this domain/api/v1/domain/history/fr-mercdeu.web.app?limit=15
This website contacted 1 IP in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://fr-mercdeu.web.app/

Effective URL:
https://fr.jfeursctlem.online/ctelem/
Redirected

AI Security Verdict

Low Risk

Confidence: 60%

2
Risk Score

Final page is a 502 error with no forms, brand impersonation, Indicators of Compromise, YARA, or corroborated phishing evidence. The redirect and INFO-level IDS heuristic warrant caution but do not support a high-risk verdict.

Risk Factors (1)
Uncorroborated INFO-level network IDS phishing-redirect heuristic
Safety Factors (5)
No credential, login, or payment forms present
No brand impersonation observed
No threat-intelligence Indicators of Compromise matched the page or resources
No JavaScript malware, YARA, or known-kit detection
Page content is only an error message, not a lure or data-collection page
Domain age information unavailable

Details

Page Title

502 Bad Gateway

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'fr-mercdeu.web.app' is registered; it also runs on subdomain 'fr-mercdeu'. Count 3 characters in 'web' split between 1 vowel and two consonants. Word splitting yields 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fr-mercdeu.web.app/

Page Load Overview

0.23s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:64%
Script:Latin
Direction:ltr

Detection Details

Text Length:84 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam65% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

phishing scam
65%
adult content
41%
news media journalism
38%
real estate property
34%
government public service
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
31--

Detected Technologies4

Meta-Refresh-Redirect
100%
HTTP/3
40%
HSTS
40%
Firebase
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B5E0A3DF2A00305541C261099546F04CE893C8EC60998074CC911A4D1F15319B4F6BB2

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:A0gYs0kMRJlKIODAKJmmHAEFddaMXeKP1qbKZgIhSAhuPoljQ6s1foAljo8n:AAkM8PAexHA2baMXz7XxhuPqWFoAho8n

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:5e3f7b40996e8063b02e9affb56e53c7

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fffffffffffffff
Perceptual Hash:870707070f0f1f3f
Difference Hash:c000000000000000
Wavelet Hash:30f0f0f0f0f0f0f0
Color Hash:#2dbfd2

Other Hashes

Crop Resistant:c000000000000000

Scan History

Scan history not available

Unable to load historical scan data