Security Scan Report: activation-2d.web.app

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 2 countries across 2 domains to perform 3 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://activation-2d.web.app/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

A page on a free web.app subdomain posing as Cetelem and telling recipients to click and authenticate their payment service — a brand-impersonation phishing lure. Do not click the link or enter credentials.

Risk Factors (4)
Impersonation of the Cetelem banking brand on a non-official domain
"Authenticate now" instruction directing users off-page to enter credentials
Hosted on a free platform subdomain (web.app) whose actual page creation date is unknown
Unsolicited security notice framed as protecting the recipient's payment card
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'activation-2d.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'activation-2d'. The core label 'web' covers 3 characters holding 1 vowel versus 2 consonants. Tokenizing the label suggests 1 word: web. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://activation-2d.web.app/

Page Load Overview

0.49s
Total Load Time
33 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:386 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking78% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
78%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
123.50.131.140Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
32--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13C414453C0851535A1C592E6F530EF0B27058B0693870BD1E2D466AAF9CBD674FB13CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:kHlptsAyrH81NAdZGL8NcC5LA4ay5+6XsM2aIGWxzA9JWE85Am8wqp4DQvGsk:Up2rc1a3z3VYSCtSKHsk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2123:CgBAAAAAAMFAACAAQAAAAAAAIAAARAgkAQACBAIhACCAAAoAAAhgEgACEACBEA4AAAAAAIAAABQAggAAEACAgABCAIABAAEA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:183c3c3c1c180000
Perceptual Hash:999b66393964cc9c
Difference Hash:302a222a3a280400
Wavelet Hash:3c3c3c3c3f3f0303
Color Hash:#763a78

Other Hashes

Crop Resistant:302a222a3a280400

Scan History

Scan history not available

Unable to load historical scan data