Security Scan Report: lmohphotography.com

Site favicon
Submitted: Sep 17, 2026, 3:47:30 AMCompleted: Sep 17, 2026, 3:48:23 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Legitimate 8-year-old French photography site that has been COMPROMISED — it now loads exploit-kit and EtherHiding malware domains, triggering 11 CRITICAL IDS alerts. Visitors risk drive-by infection.

Risk Factors (4)
Active exploit-kit malware delivery and EtherHiding exfiltration observed in network traffic
Page loads multiple threat-intel-flagged malware domains (iclickfix cluster, Beer exploit-kit cluster)
Heavy JavaScript obfuscation (Function() constructor) inconsistent with a simple portfolio site
Legitimate-looking business site appears compromised to serve drive-by malware to visitors
Domain age information unavailable

Details

Page Title

LMOH Photography | Photographe amoureux de moments sincères

Scan Type

public

Domain Name Analysis

You're looking at domain 'lmohphotography.com' on the commercial generic top-level domain (.com) with no subdomain. The second-level label 'lmohphotography' is 15 characters long containing 4 vowels alongside 11 consonants. Word splitting yields three words: l, moh, photography. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lmohphotography.com

Page Load Overview

30.01s
Total Load Time
2.0 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:54%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:7,445 chars
Detector Agreement:80%
Language mismatch: Declared as en-US but detected as fr

Website Classification

Primary Category

corporate business90% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
90%
government public service
86%
blog personal website
83%
education learning
81%
entertainment media
73%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12213.255.195.45France
AS210403Groupe LWS SARL
6142.250.154.95Google · CDNUnited States
AS15169Google LLC
623.52.180.61Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
6104.21.43.2Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6172.67.130.228Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
613.33.187.25Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
635.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
6150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
6178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
6104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10216--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FC043B337321463B12DB46D9E2E5335A20E2D60FDA1742FCF6F6406FA6F6DD1189A224

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:oCYnsokJcgK///7rKKKK5rKKKKuzKKKKbpKKKK9PqKKKKqEKKKKuNKKKKV0KKKK7:oT+Liq4T

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:181459:N4Z6WaA9CAQyVVAQBAGG4QJIEgSkVovIiAHRGLUYCLAcEhCAEFQIAEiCIGCgQAZGAKFJohZgWGqMk/YQ64BMYMuAISgCAEMg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefefee6e7ffffff
Perceptual Hash:f555d9aa2255d922
Difference Hash:0000000c0c000000
Wavelet Hash:02021e06263e3e3e
Color Hash:#e06c98

Other Hashes

Crop Resistant:0000000c0c000000

Scan History

Scan history not available

Unable to load historical scan data