Security Scan Report: location-vacances-entre-particuliers.com

Redirected to:
https://www.location-vacances-entre-particuliers.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 2 countries across 11 domains to perform 227 HTTP transactions. The main domain is location-vacances-entre-particuliers.com and was registered 9 years ago.

Submitted URL: https://location-vacances-entre-particuliers.com

Effective URL:
https://www.location-vacances-entre-particuliers.com/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Established villa-rental domain is compromised: 'clearfake' content-malware Indicators of Compromise on the primary domain plus Binance Smart Chain testnet C2 calls indicate ClearFake-style malware delivery.

Risk Factors (4)
Content-malware threat-intel match (clearfake) on the primary domain, corroborated by two independent feeds
Additional malware IoC ('unknown loader') reported for the same domain
Cross-origin calls to Binance Smart Chain testnet RPCs — ClearFake-style blockchain-based C2 lookup
Five eval() calls in page scripts
Domain age information unavailable

Details

Page Title

Location grande Villa vacance Nosy Be, plage, piscine privée

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'location-vacances-entre-particuliers.com' is registered. The core label 'location-vacances-entre-particuliers' covers 36 characters with 14 vowels and 19 consonants; it also includes three hyphens. Segmentation suggests 8 words: location, vac, ances, entre, part, icu, lier, s. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Forbidden ‘You don't have permission to access this resource.

Page Load Overview

9.80s
Total Load Time
7.2 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:6,468 chars
Detector Agreement:100%

Website Classification

Primary Category

real estate property100% confidence
Type: spa
Method: ml+structural

All Detected Categories

real estate property
100%
travel tourism
98%
education learning
94%
adult content
93%
finance banking
92%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23146.88.233.179Paris, Île-de-France, France
AS53589PlanetHoster
17142.251.14.97Google · CDNUnited States
AS15169Google LLC
17142.251.110.95Google · CDNUnited States
AS15169Google LLC
17142.251.127.155Google · CDNUnited States
AS15169Google LLC
17216.239.32.36Google · CDNUnited States
AS15169Google LLC
17172.67.74.76Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17142.251.14.94Google · CDNUnited States
AS15169Google LLC
17142.251.127.154Google · CDNUnited States
AS15169Google LLC
17142.251.127.157Google · CDNUnited States
AS15169Google LLC
17142.251.127.156Google · CDNUnited States
AS15169Google LLC
22713--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C6D0979FA1AE41085653B3C069D12780A802937A78C2078CEF859043E0042FDC00114C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:hn8FQtJCc4svmo9s9xwIgsozEr6VyF02xxdGzsQWrQz:hnMQtJOo9yxBgsozR4F0+dgsQoU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:aa79eb93724a4ede76d074c2456d00b6

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fffffffffffffff
Perceptual Hash:83030303070fffff
Difference Hash:c040000000000000
Wavelet Hash:30f0f0f0f0f0f0f0
Color Hash:N/A

Other Hashes

Crop Resistant:c040000000000000

Scan History

Scan history not available

Unable to load historical scan data