Security Scan Report: frstmrchnt.com

Site favicon
Submitted: Feb 11, 2026, 5:22:14 PMCompleted: Feb 11, 2026, 5:23:49 PMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is frstmrchnt.com and was registered NaN years ago.

Submitted URL: https://frstmrchnt.com/signup/verify-registration.php

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Confirmed phishing scam impersonating First Merchant Bank; do not submit any credentials.

Risk Factors
Brand impersonation of a bank on a newly registered domain
Domain registered less than 7 days ago with a login form
Multiple password fields indicate credential harvesting
Unranked domain (not in Cisco Umbrella top 1M) increases suspicion
Absence of legitimate content; page returns a connection error
Domain age information unavailable

Details

Page Title

frstmrchnt.com

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

finance banking

(59%)

Domain Information

The domain 'frstmrchnt.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'frstmrchnt' spans 10 characters split between 0 vowels and 10 consonants. Segmentation suggests 5 words: fr, st, mr, ch, nt. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://frstmrchnt.com/signup/verify-registration.php

Page Load Overview

24.20s
Total Load Time
36
HTTP Requests
3
Domains
213 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:3,586 chars
Detector Agreement:67%

Website Classification

Primary Category

finance banking59% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
59%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
36188.114.97.3United States
AS13335Cloudflare, Inc.
361--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CA048F773296063986558498F05B83099F20B143F506C9BCB9BCBAD9BFDED06107BB78

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:nfQho9PKBb9Js3q9Jzbs6tlg3SBKwdQWgceIszE2bMy8OldO:4hoC9JSqzzbs6o3Sj3gcrsg2eA0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:184551:AEnIgsRGxQhZSRxMRFCgKiD+CgTKEBOKECBCUAJL+sDQI4cykBvQgOgBFJAyBYGAEk7HIBAhFgKSEK2JDQ4QMpCQkIyhQVdA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc3c7ffffffff
Perceptual Hash:b331cccccc333333
Difference Hash:00181c1c00000000
Wavelet Hash:ffdfc3c700000000
Color Hash:#40bf7b

Other Hashes

Crop Resistant:00181c1c00000000

Scan History

Scan history not available

Unable to load historical scan data