ScanMalware.com

Security Scan Report: joliejaune.tn

Site favicon
Submitted: Completed: publiccompleted

AI Security Verdict

Confirmed Scam

Confidence: 94%

10
Risk Score

Legitimate-looking Tunisian agency site, but its pages are compromised: a CRITICAL ErrTraffic/Exvicy WordPress loader, 6 CRITICAL EtherHiding exfil IDS alerts, and the domain itself flagged as malware. High danger.

Risk Factors (5)
Compromised WordPress site serving an injected malicious loader (ErrTraffic/Exvicy)
CRITICAL YARA rule match on obfuscated atob/XOR + new Function dynamic code execution
6 CRITICAL IDS alerts for EtherHiding malware exfiltration over blockchain RPC channels
Primary domain IoC flagged as malware by 2 corroborating threat-intel feeds
Malicious third-party scripts/resources loaded from domains flagged as clearfake malware
Domain age information unavailable

Details

Page Title

Agence Marketing Digital & Communication à Sfax \| Jolie Jaune

Scan Type

public

Domain Name Analysis

You're looking at domain 'joliejaune.tn' on the Tunisian country-code top-level domain (.tn) while skipping any subdomain. The registrable portion 'joliejaune' spans 10 characters holding six vowels versus 4 consonants. Breaking it apart gives 2 words: jolie, jaune. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://joliejaune.tn

Page Load Overview

75.10s
Total Load Time
3.2 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:7,320 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12188.165.5.107France
AS16276OVH SAS
7142.251.20.95Google · CDNUnited States
AS15169Google LLC
7142.251.20.97Google · CDNUnited States
AS15169Google LLC
7142.251.14.155Google · CDNUnited States
AS15169Google LLC
7188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.14.94Google · CDNUnited States
AS15169Google LLC
7104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7216.239.32.36Google · CDNUnited States
AS15169Google LLC
7142.251.14.157Google · CDNUnited States
AS15169Google LLC
7142.251.20.132Google · CDNUnited States
AS15169Google LLC
15922--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A874F9A1366B1410228B46C7916B3E1D689DF9CAE501C3E8F7FD0554BFE6CB076A239C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:TNTE6BgZmS8x3AlZMHcw1UACo1iP2HKKdoMNlItOCi5TKQVGBOXjgETVpguzj15y:TWlmfx3J1Udo1i+Hfd5TKrr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:362817:zwFFlEEBQJiA5bgwYDEIARhcAYKIUQYJAqUEdjA2lgAIfgkJnECoEAZJAjcIABEldbBEjzBCQoxCyjgAUgEwAc9hIODiEAIw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffef0707e3e3e3
Perceptual Hash:a699cc6d1632f38c
Difference Hash:6d76490d4f4fc5c5
Wavelet Hash:bfffc703030141e3
Color Hash:#86672d

Other Hashes

Crop Resistant:6d76490d4f4fc5c5,797c5664798b0687,cd49ba898cba48cd,5754b59596b45555,6828888888a82236,d898aee6e6ae9a92

Scan History

Scan history not available

Unable to load historical scan data