Security Scan Report: lapcfprotectionincendie.fr

Site favicon
Submitted: Sep 22, 2026, 11:47:26 AMCompleted: Sep 22, 2026, 11:47:45 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Compromised WordPress site serving a fake Cloudflare human-verification challenge that triggers EtherHiding malware exfiltration over blockchain RPC domains, with corroborated malicious loaders.

Risk Factors (6)
CRITICAL IDS malware alerts for EtherHiding exfiltration (x3)
Primary domain threat-intel match as malware loader
Third-party malicious CDN resource entry-code-cdn.codes (2 corroborated feeds)
Blockchain RPC / smart-contract calls consistent with EtherHiding payload retrieval
Leaked WordPress widget source exposed in a challenge interstitial (compromised CMS)
HIGH Suricata alert: Spamhaus DROP listed traffic
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'lapcfprotectionincendie.fr' uses the French country-code top-level domain (.fr) while skipping any subdomain. Count 23 characters in 'lapcfprotectionincendie' holding nine vowels versus 14 consonants. Word splitting yields 6 words: la, pcf, protection, inc, end, ie. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lapcfprotectionincendie.fr

Page Load Overview

0.59s
Total Load Time
32 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:3,643 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2217.160.0.208Germany
AS8560IONOS SE
1193.32.220.131Frankfurt am Main, Hesse, Germany
AS48314IP-Projects GmbH & Co. KG
1104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1193.32.220.133Frankfurt am Main, Hesse, Germany
AS48314IP-Projects GmbH & Co. KG
1104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
135.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
87--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T109D196DAD7C8EAD35B5F25782D81B24844EC02DDE1A21CC9DF1DF0A006213DD997E959

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:oztIpzrnU20vTfSvLK5y8oeFXsUgWUaCc5vB79Lvan5dZqyFrC:MupzaAPe5XUs

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6716:GACCJEgYgqKGEILAR5AggJQw2WBCkgAhRKIiVEMBHBAAMgGBgNJ7kJGAQXAUIBAIyCuGQCKxIiEACEqQISREhSEEAY8oAEIL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffffffffff
Perceptual Hash:aa2a2a2a6acacbeb
Difference Hash:4925000000000000
Wavelet Hash:0000ffff0f0f0f0f
Color Hash:#d2797e

Other Hashes

Crop Resistant:4925000000000000

Scan History

Scan history not available

Unable to load historical scan data