ScanMalware.com

Security Scan Report: rondpoint-trajet.web.app

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/dbf73b01-9a61-4aad-abc0-5be85548ccb7Domain and IP registration (RDAP)/api/v1/rdap/dbf73b01-9a61-4aad-abc0-5be85548ccb7How often this domain was scanned/api/v1/domain/stats/rondpoint-trajet.web.appScan history for this domain/api/v1/domain/history/rondpoint-trajet.web.app?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://rondpoint-trajet.web.app/

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Fake BNP Paribas KYC page on a free .web.app subdomain, using the bank's copyright and an 'update your account information' lure to push victims toward credential theft.

Risk Factors (4)
Impersonation of BNP Paribas, a different entity's brand, on a non-official domain
KYC/account-update social-engineering pretext designed to extract banking credentials
Hosted on a free hosting platform subdomain with unknown age and no ownership transparency
Unranked domain with no legitimate brand relationship to the impersonated bank
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'rondpoint-trajet.web.app' uses the application-focused generic top-level domain (.app) with subdomain 'rondpoint-trajet'. Count 3 characters in 'web' containing one vowel alongside 2 consonants. Word splitting yields one word: web. No strong language cues emerged from the frequency lists.

Screenshot

NOUS AVONS BESOIN DE METTRE A JOUR VOS INFORMATIONS CLIENT Bonjour, ‘Nous sommes heureux de vous compter parmi nos clients et vous remercions de votre confiance, La réglementation{1] impose a tout...

Page Load Overview

0.20s
Total Load Time
9 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:3,163 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking75% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
75%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
21--

Detected Technologies4

HTTP/3
40%
HSTS
40%
Firebase
40%
Microsoft Word
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15C438C44F8605E5773B5A1CAAF20E4F41B5B433AC8090297F0ACE6A93F83D64D66357B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:Z9r8PvNNxmM2c9eDiTUo4f4UtupKB8cOXc+XV/4vsp6MsT/HAbLePO4MvbG3PP4F:rr89Nxnp4w95uPH/RnDG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:59257:AEwAABiWtAGZGJIeR1K2QjfkUMABkGggDQJBKEwgMwYsjkIYAOinBBKQWRA5AAQ5i4HQ1AgjAgGYAAQiDCkVNjEkPcbkdJzP

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7e7e7e7ff
Perceptual Hash:f77588732688998e
Difference Hash:0c0c0c0c0c0c0c04
Wavelet Hash:02022626e6e6e6c2
Color Hash:N/A

Other Hashes

Crop Resistant:0c0c0c0c0c0c0c04

Scan History

Scan history not available

Unable to load historical scan data