Security Scan Report: comment-ca-marche.net

Redirected to:
https://www.comment-ca-marche.net/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 30 IPs in 3 countries across 24 domains to perform 73 HTTP transactions. The main domain is comment-ca-marche.net and was registered 8 years ago.

Submitted URL: https://comment-ca-marche.net

Effective URL:
https://www.comment-ca-marche.net/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Compromised French blog site; page body carries analyst-vetted ErrTraffic/Exvicy ClickFix malware loader, critical EtherHiding IDS exfiltration alerts, and the primary domain is flagged as 'clearfake' malware by two independent feeds. Avoid.

Risk Factors (6)
Analyst-vetted malicious kit injected into this WordPress page (ErrTraffic/Exvicy ClickFix loader)
Fake 'Human Verification' ClickFix overlay instructing Windows users to run Terminal commands (Win+X) — social-engineering malware delivery
Primary domain flagged as 'clearfake' malware by two independent threat feeds
Four CRITICAL IDS malware alerts for EtherHiding exfiltration, plus blockchain RPC resolution
Obfuscated inline JavaScript using atob + charCodeAt + Function()/eval to decode and execute a payload
External resources loaded from domains flagged as exploit-kit/malware (cloudflare-check.net, clickzona.net, checkyoubrowse.codes)
Domain age information unavailable

Details

Page Title

Comment-ca-marche.net -

Scan Type

public

Domain Name Analysis

You're looking at domain 'comment-ca-marche.net' on the network infrastructure generic top-level domain (.net). The registrable portion 'comment-ca-marche' spans 17 characters with five vowels and 10 consonants, plus 2 hyphens. Word splitting yields 3 words: comment, ca, marche. The median word length lands at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://comment-ca-marche.net

Page Load Overview

12.01s
Total Load Time
2.7 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:17,136 chars
Detector Agreement:75%

Website Classification

Primary Category

forum50% confidence
Type: dynamic
Method: structural

All Detected Categories

forum
50%
corporate
50%
news/blog
40%

Detected Features

Articles
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15146.88.236.120Paris, Île-de-France, France
AS53589PlanetHoster
2104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2192.178.183.95Google · CDNUnited States
AS15169Google LLC
251.91.128.19France
AS16276OVH SAS
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.152.4Google · CDNUnited States
AS15169Google LLC
2192.178.183.94Google · CDNUnited States
AS15169Google LLC
2157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
2104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
251.91.48.14France
AS16276OVH SAS
7330--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T159A3F9F283CC0DBA922AA7DB5440F31565BF4A3ACE0565C4B9FF2246D751EA4F16232C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:VapItuKEm4ISzr4EoN1HExD5fZdDLNppY3oZe0GvusNCegcl+N4MHXUN3cfFNqAr:EetuKE/LH8BI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:103652:BCQhMR7coYkCpRCNQINEojiwThHB7AywCASwykAy6gswAUBACKUrEiEAGqEXAHQEzECiQN9AxQDYwkMUkUIDBWoNEYFGAEBR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000010101010101
Perceptual Hash:aa5555557755cc88
Difference Hash:0001010909010101
Wavelet Hash:323313030d1d0f0f
Color Hash:#4077bf

Other Hashes

Crop Resistant:0001010909010101

Scan History

Scan history not available

Unable to load historical scan data