Security Scan Report: convention-securitaire-franc.web.app

Submitted: Completed: publiccompleted
This website contacted 6 IPs in 3 countries across 4 domains to perform 12 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://convention-securitaire-franc.web.app/

AI Security Verdict

High Risk

Confidence: 84%

8
Risk Score

Bank-branded phishing landing page falsely presenting as Crédit Agricole S.A. on a Firebase subdomain, using a fake 'Secupass activation' lure to funnel victims toward credential theft.

Risk Factors (5)
Brand impersonation of a major French bank on a non-official domain
Free instant-publishing hosting platform subdomain used for a bank-branded page
Urgency / account-security social engineering (activation of a 'free security service')
Unranked domain with unknown tenant age, inconsistent with a real bank property
Offers no verifiable corporate identity, legal notices or contact details of the impersonated bank
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'convention-securitaire-franc.web.app' is registered and includes subdomain 'convention-securitaire-franc'. Count 3 characters in 'web' split between 1 vowel and 2 consonants. It segments into one word: web. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://convention-securitaire-franc.web.app/

Page Load Overview

0.60s
Total Load Time
25 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:498 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical73% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
73%
technology software
46%
government public service
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
2142.251.14.207Google · CDNUnited States
AS15169Google LLC
2158.191.169.62France
AS9159Credit Agricole SA
234.254.17.49Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
234.153.2.27Google · CDNUnited States
AS396982Google LLC
252.212.17.27Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
126--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12DA23141935C1E3E09E970E0E1709FCA53AF1EB76B1145A8F9B7B236E24D5A029706FC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:h7r8LW81Tll4LIv0Yz0dpT6ayjdyOuPbLuPbheLIcjuPbvuPbmJ6e7Bo9ZKgv0Y5:VgZlandA/ByqGlmeBHx5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:21364:CCIBE4BSIIAQS+EkIyGCQggqAAk8yGIyiooooEJtqHkAiQiKBgjKE7IhAIQDgHCCA3JJgAEWEBJEAy0ABUCEKZLIUUYiANYQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:efc3e7ffe3e3ffff
Perceptual Hash:e631996666998e66
Difference Hash:140e0c184c0c100c
Wavelet Hash:c3c3c3c3c0c0c4c0
Color Hash:#a1d279

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data