Security Scan Report: sequimed.net

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 4 domains to perform 49 HTTP transactions. The main domain is sequimed.net and was registered 7 months ago.

Submitted URL: https://sequimed.net

AI Security Verdict

Confirmed Scam

Confidence: 94%

9
Risk Score

Legitimate-looking French medical supplies site whose pages are compromised: analyst-vetted ClearFake loader, TA569 exploit-kit beacons to content-website-analytics.com, and injected gambling spam links. No forms, but visiting risks malware.

Risk Factors (5)
Known malicious kit ClearFake (blockchain contract loader / ClickFix chain) identified on the page
CRITICAL IDS exploit-kit (TA569) alerts against content-website-analytics.com loaded in DNS and TLS SNI
Primary domain sequimed.net flagged as an unknown malware loader in threat intelligence
Off-topic gambling/SEO spam links injected into the page content, indicating site compromise
Third-party script host content-website-analytics.com corroborated by two independent feeds as socgholish malware
Domain age information unavailable

Details

Page Title

SEQUIMED – Fourniture et de Distribution des Équipements et Consommables Médicaux

Scan Type

public

Domain Name Analysis

The domain name 'sequimed.net' uses the network infrastructure generic top-level domain (.net) and has no subdomain. Its registrable label 'sequimed' stretches across 8 characters holding 4 vowels versus four consonants. Splitting it apart reveals three words: se, quim, ed. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sequimed.net

Page Load Overview

2.84s
Total Load Time
657 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:40,243 chars
Detector Agreement:67%

Website Classification

Primary Category

healthcare medical67% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
67%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13165.227.119.157Clifton, New Jersey, United States
AS14061DigitalOcean, LLC
1274.125.29.95Google · CDNUnited States
AS15169Google LLC
12103.224.182.189San Diego, California, United States
AS133618Trellian Pty. Limited
12142.251.14.94Google · CDNUnited States
AS15169Google LLC
494--

Detected Technologies14

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F0A329E3E49A187F025732DCB8757EEBDE6893C19B81CEA4F374F12456E0AE40152A1C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:INNtA/905UT+H4OTcFrF3DPtgzes8pN59tmOnSGwEKCMrkd8H:R/99+H4OTcFoze+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:105921:5oQeCAQMOVGChyUHGBSaESERQbFcUDEYRGRZAYgAjBg0ygJQRWP0IKyIRoiAMyMmkEBMMUqHScQZHZICCDEGCMdADTAsFSQU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000ffffffffff
Perceptual Hash:aa7a7a8585c5c1ec
Difference Hash:c4290100e7c51121
Wavelet Hash:000000bf7f7fff85
Color Hash:#d279c1

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data