Security Scan Report: clientes.ultrafastplay.top

Submitted: Nov 14, 2025, 4:24:42 PMCompleted: Nov 14, 2025, 4:25:12 PMpubliccompleted
Loading additional data...

Summary

This website contacted 13 IPs in 3 countries across 6 domains to perform 47 HTTP transactions. The main domain is clientes.ultrafastplay.top and was registered NaN years ago.

Submitted URL: https://clientes.ultrafastplay.top/new/car/www.sfr.fr-login-return_url/

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

High‑risk phishing page impersonating SFR with hidden password field; do not trust.

Risk Factors
Credential harvesting form with hidden password field
Brand impersonation on an unrelated, unranked domain
Use of a suspicious subdomain (clientes.ultrafastplay.top) to mimic SFR login
Domain age information unavailable

Details

Page Title

Espace Client SFR - Gestion de mon compte SFR

Scan Type

public

Language

🇫🇷

French

(58% confidence)

Category

technology software

(71%)

Domain Information

Within the .top top-level domain, 'clientes.ultrafastplay.top' is registered and includes subdomain 'clientes'. The core label 'ultrafastplay' covers 13 characters holding four vowels versus 9 consonants. It segments into three words: ultra, fast, play. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://clientes.ultrafastplay.top/new/car/www.sfr.fr-login-return_url/

Page Load Overview

12.03s
Total Load Time
47
HTTP Requests
6
Domains
686 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:58%
Script:Latin
Direction:ltr

Detection Details

Language Code:fr
Detection Confidence:58%
Script Type:Latin
Text Length:8,198 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software71% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
71%
government public service
62%
corporate business
59%
documentation technical
44%
adult content
38%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1163.140.62.236United States
AS16509AMAZON-02
369.49.241.39United States
AS19871NETWORK-SOLUTIONS-HOSTING
380.125.163.172Lille, Hauts-de-France, France
AS15557Societe Francaise Du Radiotelephone - SFR SA
393.20.64.1Orléans, Centre-Val de Loire, France
AS15557Societe Francaise Du Radiotelephone - SFR SA
3142.250.185.195United States
AS15169GOOGLE
363.140.62.200United States
AS16509AMAZON-02
363.140.62.172United States
AS16509AMAZON-02
363.140.62.210United States
AS16509AMAZON-02
32a02:8400:21:1::3France
AS15557Societe Francaise Du Radiotelephone - SFR SA
363.140.62.120United States
AS16509AMAZON-02
4713--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T159630A33E1C8515F9323C28C3CA1A31E6523810BC6769D96B7DCCF54AFC7A90A94969F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:3/h85uGxDprK31Hl4AzDfOHDX9lt93uapJrDDSrey:pYrz2DO9ltLHrXSrey

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:72659:CKDATiABw7fQIBBS2MUiEHkI59CUB5AiehIQAiMMCAFgAAwgCjDLgB0lMzC5uHICgQkRIQUEixACgYcABiZuogAkpDGLD+Dj

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c1c3c3c1000
Perceptual Hash:9e3861c709cfce98
Difference Hash:55bb393931696917
Wavelet Hash:01013d1d3d3d3f33
Color Hash:#d27992

Scan History

Scan history not available

Unable to load historical scan data