Security Scan Report: visiterlarca.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 31 IPs in 4 countries across 23 domains to perform 295 HTTP transactions. The main domain is visiterlarca.com and was registered 2 years 5 months ago.

Submitted URL: https://visiterlarca.com/

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Legitimate-looking CAR tourism site whose pages have been compromised to inject a ClickFix/AMOS stealer loader via obfuscated scripts; visitors risk malware infection, so avoid.

Risk Factors (4)
Injected ClickFix/AMOS stealer loader served to visitors (macOS payload)
Obfuscated JavaScript hiding command-and-control style campaign tracking hosts
Multiple multi-source content-malware domain indicators among loaded resources
Critical malware IDS signature triggered by the capture
Domain age information unavailable

Details

Page Title

La République Centrafricaine : Votre prochaine destination La République Centrafricaine : Votre prochaine destination La République Centrafricaine : Votre prochaine destination - Visiter La RCA: République Centrafricaine

Scan Type

public

Domain Name Analysis

The domain 'visiterlarca.com' uses the commercial generic top-level domain (.com). Its registrable label 'visiterlarca' stretches across 12 characters with five vowels and seven consonants. Word splitting yields 3 words: visite, rl, arca. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://visiterlarca.com/

Page Load Overview

8.55s
Total Load Time
10.3 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:5,250 chars
Detector Agreement:100%

Website Classification

Primary Category

travel tourism97% confidence
Type: spa
Method: ml+structural

All Detected Categories

travel tourism
97%
government public service
84%
blog personal website
55%
adult content
47%
corporate
35%

Detected Features

Search
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25172.67.142.135Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.21.66.214Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.14.95Google · CDNUnited States
AS15169Google LLC
9185.92.183.208Riga, Riga, Latvia
AS56971Cgi Global Limited
9147.45.37.168Russia
AS203273NetCrafters OU
92.58.65.235Frankfurt am Main, Hesse, Germany
AS44051Fornex Hosting S.L.
9142.251.14.94Google · CDNUnited States
AS15169Google LLC
9172.67.139.171Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
9142.251.127.84Google · CDNUnited States
AS15169Google LLC
29531--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A8944AA27F66283E101F12CB9933A34D95BADAF5D512D1E4F6BB015793F9CE032B2214

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:HXV4eUcaEHgHR1+mLD7+Ld0kJAcPkAWomWhC:IoC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:435539:EKhALETTxskMHXIAARaA2ABICAIGeMxlkiDImXoBJhxQyAoAkAREGihgChiNBhZlCAdgERAwCDMQARiIh4yLGQpkAhIkWIlB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:800000000000ffff
Perceptual Hash:de5ee0258d4a3ba8
Difference Hash:2a84496970084500
Wavelet Hash:f1f8a03c0000ffff
Color Hash:#79a4d2

Scan History

Scan history not available

Unable to load historical scan data