Security Scan: https://fr-micfrance.web.app/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f4f4bf84-1050-4df4-8d8c-36270146d3c8 Domain and IP registration (RDAP)/api/v1/rdap/f4f4bf84-1050-4df4-8d8c-36270146d3c8How often this domain was scanned/api/v1/domain/stats/fr-micfrance.web.app Scan history for this domain/api/v1/domain/history/fr-micfrance.web.app?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://fr-micfrance.web.app/

Effective URL:

https://fr.asfctelem-srenvro.online/ctelem/?pwd=cetelem

Redirected

AI Security Verdict

Moderate Risk

Confidence: 74%

Risk Score

Brand-lookalike redirect page: a free web.app subdomain silently bounces visitors to an unranked .online host whose name mimics Cetelem and whose path carries a pwd= lure. No form observed on the entry page, but the redirect pattern is a phishing delivery shape.

Risk Factors (5)

Cross-domain redirect from a free hosting subdomain to an unrelated, unreachable lookalike domain

Deceptive destination hostname built around a financial brand name (Cetelem) on a domain that is not that brand's official domain

'pwd=cetelem' query parameter in the redirect path indicates a password-capture lure

Destination host has no ranking and no attributable registration history

Entry page exists solely to bounce visitors onward ('Page Redirection'), giving no disclosure of who operates the destination

Safety Factors (6)

No credential, password, or payment form present in the captured entry-page DOM (0 forms)

No JavaScript malware/hunting-rule patterns, no credential exfiltration, no cross-origin form submissions

No threat-intelligence matches against the scanned page or its resources

The 502 error text came from the scanning proxy, not from the destination site (not counted as risk)

No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain 'fr-micfrance.web.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'fr-micfrance'. Count 3 characters in 'web' with one vowel and two consonants. Segmentation suggests one word: web. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page did not load

The browser never reached this site, so there is no screenshot of it.

Page Load Overview

0.24s

Total Load Time

1 KB

Total Size

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
3	1	-	-

Detected Technologies4

Meta-Refresh-Redirect

100%

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: fr-micfrance.web.app