Security Scan Report: zcr.bfm.mybluehost.me

Redirected to:
https://zcr.bfm.mybluehost.me/fr/home/nkl-log.php?token=&error=off
Submitted: Oct 14, 2025, 12:57:06 AMCompleted: Oct 14, 2025, 12:57:50 AMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 5 HTTP transactions. The main domain is zcr.bfm.mybluehost.me.

Submitted URL: https://zcr.bfm.mybluehost.me/fr/home/ssl.php

Effective URL: https://zcr.bfm.mybluehost.me/fr/home/nkl-log.php?token=&error=offRedirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Phishing site impersonating Nickel, confirmed scam

Risk Factors
Credential harvesting form (password only)
Brand impersonation of Nickel on an unranked domain
Newly registered domain (<7 days) with login form
Lack of Cisco Umbrella ranking (UNRANKED) for a site claiming a major brand
Password field without accompanying username field
Domain age information unavailable

Details

Page Title

Customer area : Manage your account | Nickel

Scan Type

public

Language

🇫🇷

French

(50% confidence)

Category

unknown

(0%)

Domain Information

The domain name 'zcr.bfm.mybluehost.me' uses the Montenegrin country-code top-level domain (.me); it also runs on subdomain 'zcr.bfm'. The second-level label 'mybluehost' is 10 characters long split between three vowels and seven consonants. Splitting it apart reveals three words: my, blue, host. Average segment length settles at 4 characters. 'my' is most common in Afrikaans usage. It also appears in English and Chinese (Pinyin) contexts. Net impression: Afrikaans phrase.

Screenshot

Security scan screenshot of https://zcr.bfm.mybluehost.me/fr/home/ssl.php

Page Load Overview

24.36s
Total Load Time
5
HTTP Requests
1
Domains
16 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Language Code:fr
Detection Confidence:50%
Script Type:Latin
HTML Lang Attribute:fr-FR
Text Length:445 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
550.6.34.96Frankfurt am Main, Hesse, Germany
AS31898ORACLE-BMC-31898
51--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A7330A77075E2769A4575CB65EA23A8A9F08E093DA035388F0BF19F087CBDD5845B38C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:9zRM2dgbM/UHMheODLFvG1lhzt9ewdBI2MF19ToXJKkyoruqr:99F6Y2tJr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:54736:zoiFKTUqIqQwMcwIAWEAVSGAAjEQSNmIgFzcEKqARgHlI4CCFB0CwzsIYKNQQIFYaFU0yvEWmRyQC0NoFERIYQuIAQQLQaJC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:27e7e7efe7ffffff
Perceptual Hash:b3278c8c9d9d2726
Difference Hash:d40c0c080c0c0000
Wavelet Hash:00c0c0c0c0e4fcfc
Color Hash:#1f2d93

Other Hashes

Crop Resistant:d40c0c080c0c0000

Scan History

Scan history not available

Unable to load historical scan data