Security Scan: Emmaüs Environnement 43

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/09352d03-1a61-423c-847f-24c466606d94 Domain and IP registration (RDAP)/api/v1/rdap/09352d03-1a61-423c-847f-24c466606d94How often this domain was scanned/api/v1/domain/stats/emmaus-environnement43.fr Scan history for this domain/api/v1/domain/history/emmaus-environnement43.fr?limit=15

This website contacted 23 IPs in 2 countries across 12 domains to perform 257 HTTP transactions. The main domain is emmaus-environnement43.fr and was registered 4 years 2 months ago.

Submitted URL: https://emmaus-environnement43.fr

AI Security Verdict

High Risk

Confidence: 93%

Risk Score

Legitimate Emmaüs Environnement 43 site appears compromised and is serving an IClickFix/EtherHiding loader (hunting rule + CRITICAL IDS hits, obfuscated blockchain-RPC script). Malware distribution risk — do not load.

Risk Factors (5)

Known malicious kit (IClickFix / EtherHiding) injected into the page — analyst-vetted, high-confidence

Obfuscated JavaScript decoding to blockchain RPC hosts (1rpc.io, 0xrpc.io, gateway.tenderly.co) used for EtherHiding stage retrieval

CRITICAL IDS malware alerts for EtherHiding exfiltration

Visitors (especially Windows users) are targeted with a ClickFix-style lure that could run attacker-supplied code

Compromised site: content is legitimate but the served page is not safe to load

Domain age information unavailable

Details

Page Title

Emmaüs Environnement 43

Scan Type

public

Favicon Hash

MMH3: -192661161

MD5: 162d9d6435683d926de90ecab8b29445

Domain Name Analysis

The domain 'emmaus-environnement43.fr' uses the French country-code top-level domain (.fr) while skipping any subdomain. The registrable portion 'emmaus-environnement43' spans 22 characters split between 8 vowels and eleven consonants, along with two digits and 1 hyphen. It segments into six words: emmaus, en, vi, ronne, ment, 43. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Xs +3347105 6324 contact@emmaus43.fr emmats à environnement sal) a Accueil Actualités Lasociétév Travailleravecnousv Où nous trouver ? FAIRE UN DON ~~ Contact seus este) MONET: Fermer be Abonne...

Page Load Overview

8.24s

Total Load Time

4.1 MB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR

Text Length:6,731 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence

Type: spa

Method: structural

All Detected Categories

corporate

70%

news/blog

40%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	51.91.236.193	Paris, Île-de-France, France	AS16276OVH SAS
11	192.178.183.95Google · CDN	United States	AS15169Google LLC
11	192.0.77.37	San Francisco, California, United States	AS2635Automattic, Inc
11	192.0.77.2	San Francisco, California, United States	AS2635Automattic, Inc
11	142.251.14.94Google · CDN	United States	AS15169Google LLC
11	142.251.20.102Google · CDN	United States	AS15169Google LLC
11	142.251.156.119Google · CDN	United States	AS15169Google LLC
11	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	104.21.5.110Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
257	23	-	-