Security Scan Report: servicefrroumbourse.netlify.app

Submitted: Completed: publiccompleted
This website contacted 25 IPs in 4 countries across 19 domains to perform 130 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://servicefrroumbourse.netlify.app/srevice

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Fake 'refund service' on a free Netlify subdomain: claims approval by French telecom operators, harvests name/phone/amount plus a card-style number, uses fake testimonials and a Telegram bot backend. Not a real refund provider.

Risk Factors (6)
Claims to be endorsed/approved by Bouygues Telecom, Orange, SFR and Free without any affiliation — misleading brand use on a non-official domain
Solicits personal data (name, phone, operator) plus a 16-digit card-like number from users seeking 'refunds' on a free platform subdomain
Form/telemetry traffic sent to api.telegram.org (Telegram bot API), typical of scam data-collection backends
Fabricated testimonials using stock avatars (i.pravatar.cc) and unlicensed brand logos from logo-stock sites
Deceptive subdomain spelling and no verifiable business identity, contact address or registration
Client scripts POST to ipinfo.io/api.ipify.org for visitor IP fingerprinting and load an unranked script host (softmedialtd.store)
Domain age information unavailable

Details

Page Title

Refund – Refund Service

Scan Type

public

Domain Name Analysis

The domain 'servicefrroumbourse.netlify.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'servicefrroumbourse'. Count 7 characters in 'netlify' with two vowels and five consonants. Tokenizing the label suggests 3 words: net, li, fy. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://servicefrroumbourse.netlify.app/srevice

Page Load Overview

2.52s
Total Load Time
1.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,917 chars
Detector Agreement:50%

Website Classification

Primary Category

finance banking55% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking
55%
adult content
33%
government public service
27%
technology software
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1035.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
5142.251.20.95Google · CDNUnited States
AS15169Google LLC
5185.15.59.240United States
AS14907Wikimedia Foundation Inc.
5146.75.121.91Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
5172.217.115.4Google · CDNUnited States
AS15169Google LLC
593.20.64.1Orléans, Centre-Val de Loire, France
AS15557Societe Francaise Du Radiotelephone - SFR SA
523.45.238.43Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
5142.251.20.113Google · CDNUnited States
AS15169Google LLC
5104.26.8.142Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.26.2.6Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13025--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B444E65757B308722C5B237DABEBB2003A609413E90CFD647DED92A48FC87E9056276D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:/WtVntyHp2K+winylPXktBJE1HKsUrv+qdTnn8gj/JoYH/1xr+/zF4yZU65xMT9X:/WwiTp8gj/JoYf1xqj8rfUy9RMw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:275425:EFQISgCAIEgkoTJIBIgApbN1INAAA4MhVwDFSAoAdf1gRQCGUB0NtiACgvMgBRoUCwBbkQaGYSGAFoCQgEKASEJBUAAUAUJl

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000e7c7c7c7ff
Perceptual Hash:b04fcfb0c5b0cf30
Difference Hash:210d718d8d9d9d8c
Wavelet Hash:e10000c7c7c7c7ff
Color Hash:#9dc587

Scan History

Scan history not available

Unable to load historical scan data