ScanMalware.com

Security Scan Report: nextcars-lease.fr

Site favicon
Submitted: Oct 9, 2026, 4:33:30 AMCompleted: Oct 9, 2026, 4:35:03 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

A vehicle-rental site whose own domain is threat-tagged as a malware loader and whose scripts load ClearFake/ClickFix/EtherHiding infrastructure via an obfuscated script hidden with injected casino SEO spam.

Risk Factors (5)
Primary domain carries a content-malware threat-intel tag (malware loader)
CRITICAL network IDS hits for ClickFix and EtherHiding malware/exfiltration
Threat-feed malware hosts hidden inside an obfuscated script on the page
Several corroborated malware domains (clearfake-1, iclickfix) contacted by page scripts
Unrelated gambling/casino SEO spam injected into the page footer
Domain age information unavailable

Details

Page Title

NextCars – Location de Véhicules Utilitaires

Scan Type

public

Domain Name Analysis

The domain 'nextcars-lease.fr' uses the French country-code top-level domain (.fr) and has no subdomain. Count 14 characters in 'nextcars-lease' split between five vowels and eight consonants, plus 1 hyphen. Tokenizing the label suggests three words: next, cars, lease. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nextcars-lease.fr

Page Load Overview

22.71s
Total Load Time
9.3 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:3,419 chars
Detector Agreement:67%

Website Classification

Primary Category

corporate business44% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
44%
government public service
39%
finance banking
28%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7217.160.0.61Germany
AS8560IONOS SE
4195.58.146.210Denmark
AS9009M247 Europe SRL
4104.21.3.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4185.92.183.208Riga, Riga, Latvia
AS56971Cgi Global Limited
4157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
4142.251.127.84Google · CDNUnited States
AS15169Google LLC
43.167.230.19Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6716--

Detected Technologies8

X-UA-Compatible
100%
WordPress
100%
Modernizrvcustom.min
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
reCAPTCHA
45%
Phlox
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D9E373D7588A24885F2FABE1E1C2DCB8ED53E19B6A8ED570366CB2753F013593241C1E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:4eyXLsZ6apV39xJuQ9on7VptbA7rU5HL9+TCpI2V/9twjcgtEYysNscsCsUZA6f+:FyaNdxJuQ0dC1TCpI26tHmX52SNpCBe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:151692:gEEXnAIyAKBAQAoJAiJA8kQkQsCggfADYxKIhwRAKh4RUIAHECIGSleAgJlAzdCAIzVJBi2KEBSCLnoMaAJCowAUEghAgNSJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000001818000000
Perceptual Hash:cc663399cc663399
Difference Hash:00304cb2b24c3000
Wavelet Hash:0c0c3c3c3f3f0f0f
Color Hash:#d2a479

Other Hashes

Crop Resistant:00304cb2b24c3000

Scan History

Scan history not available

Unable to load historical scan data