ScanMalware.com

Security Scan Report: paiementfr.fr

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3d598933-dd7a-4800-83e9-32da6a120911Domain and IP registration (RDAP)/api/v1/rdap/3d598933-dd7a-4800-83e9-32da6a120911How often this domain was scanned/api/v1/domain/stats/paiementfr.frScan history for this domain/api/v1/domain/history/paiementfr.fr?limit=15
This website contacted 7 IPs in 2 countries across 4 domains to perform 22 HTTP transactions. The main domain is paiementfr.fr and was registered 1 month ago.

Submitted URL: https://paiementfr.fr/

AI Security Verdict

High Risk

Confidence: 65%

7
Risk Score

39-day-old unranked domain cloning Wero payment branding behind a fake browser-check page; no harvesting form rendered yet, but this is a cloaked impersonation staging page — avoid.

Risk Factors (4)
Impersonation of a different entity's payment brand (Wero) on a non-official domain
Fake browser-check interstitial that hides page content from automated review (cloaking)
Very new, unranked domain (39 days) using a payment-themed name ('paiementfr')
Payment-brand lures are typical precursors to credential or payment-detail phishing
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'paiementfr.fr' on the French country-code top-level domain (.fr) while skipping any subdomain. Its registrable label 'paiementfr' stretches across 10 characters containing four vowels alongside six consonants. Word splitting yields four words: pai, e, ment, fr. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://paiementfr.fr/

Page Load Overview

0.44s
Total Load Time
273 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:234 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking98% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
98%
government public service
77%
technology software
68%
cryptocurrency blockchain
68%
healthcare medical
57%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
492.113.16.100Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
392.113.16.201Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
392.113.23.110Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
3142.250.154.94Google · CDNUnited States
AS15169Google LLC
3104.16.57.10Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
227--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14C33D762A3A445F97A6F876A8546A328724CFB40DE45B3E6B0F5D12444C8AF704F7B0F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:10YH+b0wNJZdypmTzaVSytz7MG2tlAiKglJ+b0vLB0:19K5yp9tz7MLlAi3lR0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:53967:ANGELpDFQCAAiEJAgASThI4ygKJFYS0tQoCBoEABBgiYYQ4BCSBihDGEQlRYxQhR0EgZEaF5KJAGCFQxnYFiABCEokQJJm0P

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffbe1cfc7e7e7f7
Perceptual Hash:e3c9c6929223cd6d
Difference Hash:8c32535a1a484d2d
Wavelet Hash:ff80808086c7e7f7
Color Hash:#a240bf

Other Hashes

Crop Resistant:8c32535a1a484d2d,94946a6b52765458

Scan History

Scan history not available

Unable to load historical scan data