ScanMalware.com

Security Scan Report: doag1a.web.app

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6d8522a3-60af-4cf1-93f3-a0c059ca11b1Domain and IP registration (RDAP)/api/v1/rdap/6d8522a3-60af-4cf1-93f3-a0c059ca11b1How often this domain was scanned/api/v1/domain/stats/doag1a.web.appScan history for this domain/api/v1/domain/history/doag1a.web.app?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://doag1a.web.app/

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Phishing lure impersonating Crédit Agricole on a free web.app subdomain, threatening blocked payments and demanding an urgent SEPA update; reported as phishing in threat intelligence.

Risk Factors (5)
Bank brand impersonation on a Firebase hosting subdomain that is not Crédit Agricole's official domain
Threat-intel phishing match on the primary domain and URL (single-source, unverified)
High-pressure deadline language threatening loss of access to funds
Unranked domain with no verifiable ownership or creation date for the subdomain
Outbound link to a domain (abre.ai) tagged as a known attacker — generic abuse reputation only, weighed as marginal context
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain 'doag1a.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'doag1a'. Its registrable label 'web' stretches across 3 characters split between 1 vowel and two consonants. Tokenizing the label suggests one word: web. No strong language cues emerged from the frequency lists.

Screenshot

4% CREDIT === AGRICOLE ACTUALISATION DE VOTRE LISTE SEPA OBLIGATOIRE Bonjour, Pour donner suite 4 nos multiples courriels ignorés, nous vous adressons cet ultime rappel de mise a jour. Votre compt...

Page Load Overview

0.22s
Total Load Time
103 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:100%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,334 chars
Detector Agreement:100%

All Detected Languages

🇫🇷fr(96%)🇩🇪de(4%)

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
21--

Detected Technologies3

HTTP/3
40%
HSTS
40%
Firebase
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F9D30131E5A73919EDFAD2FBF09F3B9886E010A4C5FA687D234473BB441E850A419D8D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:DXwwFtD24GMiM9sSZhtz6FaRTTEe72bPUvWn2bq:jFtKrUZhbVNcU+2bq

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:140355:GOONxST4AqJREQCaKBwHjjBOIHgjKQ1AGJRZZQoAGewMoCRIDUCIwICJMACQRRApAQQECBgBQ7HGGwuJsRdEICYAVBEwDTIB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f1f070f0fbf9fff
Perceptual Hash:8703c303c167f77c
Difference Hash:c0f06c6cb8787900
Wavelet Hash:3f0f07070f0f00ff
Color Hash:07200018400

Other Hashes

Crop Resistant:c0f06c6cb8787900

Scan History

Scan history not available

Unable to load historical scan data