Security Scan Report: canatchaqueheritage.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 5 domains to perform 148 HTTP transactions. The main domain is canatchaqueheritage.com and was registered 3 years 4 months ago.

Submitted URL: https://canatchaqueheritage.com

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Legitimate-looking non-profit page that has been compromised: it shows a fake Cloudflare verification urging users to paste terminal commands and loads blockchain-hosted malware (EtherHiding) — do not interact.

Risk Factors (4)
Fake browser/Cloudflare verification directing users to run terminal commands (ClickFix malware lure)
Critical IDS malware alert for EtherHiding exfiltration combined with blockchain smart-contract requests
Primary domain flagged as a malware loader in threat intelligence
Additional malicious third-party resources loaded by the page (checkyoubrowse.codes, malicious RPC host)
Domain age information unavailable

Details

Page Title

Canatchaqué Héritage

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'canatchaqueheritage.com' is registered. Count 19 characters in 'canatchaqueheritage' split between 9 vowels and 10 consonants. Segmentation suggests five words: can, at, cha, que, heritage. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://canatchaqueheritage.com

Page Load Overview

2.40s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:4,075 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service69% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
69%
blog personal website
38%
corporate
25%
news/blog
20%

Detected Features

Articles
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
32107.180.115.54United States
AS398101GoDaddy.com, LLC
29142.251.14.94Google · CDNUnited States
AS15169Google LLC
29132.145.155.63Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
29178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
29192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
1485--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C705E7367842200592274D52A2CE2F0C6518E153E7620EDBF296949DCBE6EFB33F5727

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:/ALRXehnyQnpRXZVJjBLQRXjLQ9XCcXYUX7ZXuYXwktBA7fvUhQze5B:/TnyQnpaktBA7f8hBB

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:846258:RAIYABAklhGQoCAEUgYBJsODQOAEA6QABIosxKEwsIpILQCMABCeDBUQADmKGLDs2biRJKJFFIkFJUkhSkwjIEBICqSsoEyG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0073fbd6766101ff
Perceptual Hash:a4052b43d45bf92f
Difference Hash:c5e6b7b4a4c56933
Wavelet Hash:00737376766101ff
Color Hash:#4077bf

Scan History

Scan history not available

Unable to load historical scan data