Security Scan Report: merkurcasino.fr

Site favicon
Submitted: Completed: publiccompleted
This website contacted 37 IPs in 5 countries across 28 domains to perform 997 HTTP transactions. The main domain is merkurcasino.fr and was registered 1 month ago.

Submitted URL: https://merkurcasino.fr/

Dialog boxes:

AI Security Verdict

High Risk

Confidence: 75%

7
Risk Score

Page claims to be the official Merkur Casino France site but actually serves an unrelated Golden Ring Club gambling operation — brand impersonation on a 35-day-old unranked domain. No credential forms detected.

Risk Factors (4)
Impersonation of a different entity's brand (Merkur) on a domain it does not own, presented as the 'official site'
Sharp mismatch between the advertised brand (Merkur Casino, French) and the actual operator content (Golden Ring Club, German, Costa Rica-registered)
Domain only 35 days old and unranked in Cisco Umbrella, consistent with a disposable brand-lure domain
Online gambling operation with bonus/deposit lures hosted under another brand's name
Domain age information unavailable

Details

Page Title

Merkur Casino ™ ❤️ Site officiel

Scan Type

public

Domain Name Analysis

Domain 'merkurcasino.fr' uses the French country-code top-level domain (.fr) with no subdomain. The registrable portion 'merkurcasino' spans 12 characters containing 5 vowels alongside 7 consonants. Tokenizing the label suggests two words: merkur, casino. Median word length comes out to six characters. No strong language cues emerged from the frequency lists.

Screenshot

Merkur Casino Accueil Connexion Bonus Application mobile Assistance Connexion Merkur Casino - France Profitez d'un bonus de bienvenue de 100 % jusqu'à 500 € et de 100 tours gratuits sur Book of Dead...

Page Load Overview

2.78s
Total Load Time
10.3 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:14,654 chars
Detector Agreement:40%

Website Classification

Primary Category

technology software75% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
75%
entertainment media
59%
gambling betting
58%
adult content
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
61188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
26188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2687.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
2687.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
2677.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
26151.101.129.242Fastly · CDNUnited States
AS54113Fastly, Inc.
26151.101.193.242Fastly · CDNUnited States
AS54113Fastly, Inc.
26151.101.65.242Fastly · CDNUnited States
AS54113Fastly, Inc.
26151.101.1.242Fastly · CDNUnited States
AS54113Fastly, Inc.
26142.251.110.95Google · CDNUnited States
AS15169Google LLC
99737--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FED50A30A122717F07232A9579DA7FA5D68D853B81432F84F1E9CF5E43CBEE5892170A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:91EXQZy1y6WwKLW8qd69BsaCBon3nCBdjEUVqnWVlHw/nQ07Nv:HEXQuy6cqd6WBon3nCBdTqnYlQ/nrv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2771950:eDAcAQUgyKBORgCAUhRWa4CgoYBFDKAxWzQpAPJMQEQiJHWDAsAAAMECHT+iBZOCwBkQ9eAnAn0AFAIIQpNBnMQAMAcwvNYQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:010038781800407e
Perceptual Hash:c8cd3232cbc98e3e
Difference Hash:43c2f3f331cdd0d4
Wavelet Hash:b170787818407e7f
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data