Security Report: www.ensfea.fr - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/97e8b5e5-0bb1-4434-a56d-ab61ac43faa0 Domain and IP registration (RDAP)/api/v1/rdap/97e8b5e5-0bb1-4434-a56d-ab61ac43faa0How often this domain was scanned/api/v1/domain/stats/ensfea.fr Scan history for this domain/api/v1/domain/history/ensfea.fr?limit=15

This website contacted 4 IPs in 2 countries across 3 domains to perform 12 HTTP transactions. The main domain is ensfea.fr and was registered 10 years ago.

Submitted URL: https://www.ensfea.fr/tour/lc/tour.html?xml=data%3Avideo%2Fmp4%3Bbase64%2CPGtycGFubz48aW5jbHVkZSB1cmw9Ii9cL2Nob3JiYXphci5vbmxpbmUvbWF0Y2gvYS54bWwiLz48L2tycGFubz4%3D&id=video-como-vs-inter-live-on-free-today-match-en-gb9001-ivn3jgx

AI Security Verdict

Moderate Risk

Confidence: 78%

Risk Score

Legitimate ensfea.fr domain appears compromised: the URL smuggles a base64 krpano XML include to external host chorbazari.online plus a fake free-live-stream lure, and the request is being blocked by the host WAF. Avoid; no forms or malware found.

Risk Factors (4)

Legitimate 10-year-old domain appears compromised and is being used as a lure gateway for third-party streaming/spam content

Crafted base64-encoded krpano XML include pointing at external host chorbazari.online through a path-traversal-style backslash trick

Sports-streaming lure keywords in the URL on a page unrelated to the site's purpose

Request intercepted by the host's WAF security check, indicating flagged/blocked traffic

Safety Factors (5)

Domain is well established (registered 2016) and belongs to a real French agricultural-teaching institution

No forms, no password, payment or email fields on the page

No Indicators of Compromise, hunting rule, IDS, kit-roster or Safe Browsing matches

No JavaScript credential exfiltration or obfuscation observed

Established domain (3811 days old) with no strong malicious indicators — risk clamped from 8 to 5

Domain age information unavailable

Details

Page Title

Test de sécurité / Security check...other network

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.ensfea.fr' on the French country-code top-level domain (.fr); it also runs on subdomain 'www'. Count 6 characters in 'ensfea' holding 3 vowels versus 3 consonants. Word splitting yields 3 words: ens, fe, a. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security check Sorry, we need to verify that this request is legitimate and is not sent by an automated system (robot). This verification process is automatic. Your browser will redirect you in a few...

Page Load Overview

0.46s

Total Load Time

218 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:53%

Script:Latin

Direction:ltr

Detection Details

Text Length:110 chars

Detector Agreement:50%

Website Classification

Primary Category

technology software91% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

91%

entertainment media

85%

documentation technical

71%

news media journalism

31%

adult content

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	109.234.165.77	France	AS50474O2switch SAS
3	109.234.160.39	France	AS50474O2switch SAS
3	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	4	-	-