Security Scan: LEROY FORTIN

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8b9fe84d-ff03-4b84-822e-18f6eaeb21c1 Domain and IP registration (RDAP)/api/v1/rdap/8b9fe84d-ff03-4b84-822e-18f6eaeb21c1 Certificate Transparency/api/v1/ct/leroyfortin.fr How often this domain was scanned/api/v1/domain/stats/leroyfortin.fr Scan history for this domain/api/v1/domain/history/leroyfortin.fr?limit=15

This website contacted 16 IPs in 3 countries across 14 domains to perform 51 HTTP transactions. The main domain is leroyfortin.fr and was registered 2 months ago.

Submitted URL: https://www.leroyfortin.fr/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised WordPress site: analyst-vetted ErrTraffic/Exvicy loader and fake ClickFix 'Human Verification' overlay, critical EtherHiding/ClickFix IDS alerts, and the primary domain itself flagged as malware. Avoid.

Risk Factors (6)

Injected ErrTraffic/Exvicy WordPress loader (obfuscated Base64/XOR payload executed via new Function)

Injected fake Cloudflare-style 'Human Verification' / ClickFix overlay instructing keyboard steps (Win+X -> Terminal) to run a pasted command

Critical IDS malware alerts: EtherHiding exfiltration and ClickFix domain resolution/TLS SNI

Primary domain itself flagged as malware ('clearfake', 'unknown loader') by multiple threat-intel feeds

Third-party script hosts reported as malicious hosts / exploit-kit clearfake loaders

Off-topic injected casino/betting SEO spam content in multiple languages unrelated to the site's own brand

Domain age information unavailable

Details

Page Title

LEROY FORTIN

Scan Type

public

Favicon Hash

MMH3: 530492348

MD5: dcab89b8e04bf53fcd7f6a44a8cb4fae

Domain Name Analysis

Within the French country-code top-level domain (.fr), 'www.leroyfortin.fr' is registered, featuring subdomain 'www'. The core label 'leroyfortin' covers 11 characters holding four vowels versus seven consonants. Segmentation suggests three words: leroy, fort, in. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

11.16s

Total Load Time

823 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:44%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR

Text Length:3,533 chars

Detector Agreement:100%

Language mismatch: Declared as fr-FR but detected as en

Website Classification

Primary Category

gambling betting87% confidence

Type: spa

Method: ml+structural

All Detected Categories

gambling betting

87%

blog personal website

34%

news/blog

20%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	109.234.166.221	France	AS50474O2switch SAS
3	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
3	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
3	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
3	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	172.67.171.128Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.14.94Google · CDN	United States	AS15169Google LLC
51	16	-	-