Security Report: wero-wallet.qsvx.fr - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5802fe41-cc32-4f23-b2b9-2508b8e2746c Domain and IP registration (RDAP)/api/v1/rdap/5802fe41-cc32-4f23-b2b9-2508b8e2746cHow often this domain was scanned/api/v1/domain/stats/wero-wallet.qsvx.fr Scan history for this domain/api/v1/domain/history/wero-wallet.qsvx.fr?limit=15

This website contacted 14 IPs in 2 countries across 4 domains to perform 18 HTTP transactions. The main domain is qsvx.fr and was registered 1 year ago.

Submitted URL: https://wero-wallet.qsvx.fr/banks/chargement/chargement_bnp.php

Effective URL:

https://wero-wallet.qsvx.fr/banks/chargement/banks/bnp/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Confirmed phishing site impersonating BNP Paribas; do not enter any credentials.

Risk Factors (5)

Brand impersonation (BNP Paribas) on non‑official domain

Domain age < 90 days (new domain)

Credential harvesting forms with password fields

Domain is UNRANKED in Cisco Umbrella (low reputation)

Multiple forms collecting login credentials

Domain age information unavailable

Details

Page Title

Accéder à mes comptes en ligne | BNP Paribas

Scan Type

public

Domain Name Analysis

Domain 'wero-wallet.qsvx.fr' uses the French country-code top-level domain (.fr), featuring subdomain 'wero-wallet'. The core label 'qsvx' covers 4 characters split between zero vowels and 4 consonants. It segments into three words: q, sv, x. Median word length is one character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.67s

Total Load Time

7.0 MB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr

Text Length:4,372 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking74% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

finance banking

74%

real estate property

47%

government public service

39%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	217.160.0.126	Germany	AS8560IONOS SE
1	151.101.1.229	San Francisco, California, United States	AS54113FASTLY
1	142.250.185.131	United States	AS15169GOOGLE
1	151.101.193.229	San Francisco, California, United States	AS54113FASTLY
1	142.250.185.202	United States	AS15169GOOGLE
1	2a04:4e42:400::485	United States	AS54113FASTLY
1	2a04:4e42:600::485	United States	AS54113FASTLY
1	151.101.65.229	San Francisco, California, United States	AS54113FASTLY
1	2a00:1450:4001:82a::2003	Frankfurt am Main, Hesse, Germany	AS15169GOOGLE
1	2a00:1450:4001:828::200a	Frankfurt am Main, Hesse, Germany	AS15169GOOGLE
18	14	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AD41A06928F0C41B116207855AF1FC197D515A03921AEC94B1AF93A54F93DCFCC5796C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:n44CeCMWiJJ21ip21911E1u12B2129BJfV7PxmWUW3H0HjrEZ9X4ECj:n4wWipJxn9XFZhdw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1997:AgBpAAwACAAAAEBAYAANAKAAAAAAAQAAJAGgAAABACAAIAAEAAACCCoAIIAAIAABEABCBAAAAQAQEggQABAAEICAAkAAGgBA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffff3e3f381ffff

Perceptual Hash:e4e49b9b64641b99

Difference Hash:04000425041b0100

Wavelet Hash:3c3c3020c3810f0f

Color Hash:#3a5378

Other Hashes

Crop Resistant:04000425041b0100

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: wero-wallet.qsvx.fr