Security Scan Report: xn--instantans-j7a.ch

Submitted: Oct 11, 2026, 12:42:02 PMCompleted: Oct 11, 2026, 12:42:42 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 95%

9
Risk Score

Legitimate-looking personal blog (5-year-old domain) whose page has been compromised: analyst-vetted ClearFake malware loader plus a rival-kit cleanup script are injected, with the domain flagged by two threat-intel feeds. Do not interact.

Risk Factors (5)
Compromised page carrying ClearFake blockchain-contract malware loader (ClickFix chain)
Second injected ClearFake script that removes rival kits and blocks navigation up to 45 seconds
Primary domain flagged as ClearFake malware distribution by two independent threat-intel feeds
Outbound POST from page JavaScript to unranked external domain ferma.seo-solutions.eu.cc
[HIGH] IDS alert: ET DNS Query for .cc TLD (potentially bad traffic)
Domain age information unavailable

Details

Page Title

Instantanés – Poésies naturelles au fil des pas

Scan Type

public

Domain Name Analysis

The domain 'xn--instantans-j7a.ch' uses the Swiss country-code top-level domain (.ch) without a subdomain. The registrable portion 'xn--instantans-j7a' spans 18 characters split between 4 vowels and ten consonants, notching one digit and 3 hyphens. Segmentation suggests 7 words: xn, instant, an, s, j, 7, a. Expect 1 character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xn--instantans-j7a.ch

Page Load Overview

5.01s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:178 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11185.176.225.7Switzerland
AS29222Infomaniak Network SA
5142.251.110.95Google · CDNUnited States
AS15169Google LLC
5142.251.156.119Google · CDNUnited States
AS15169Google LLC
5192.178.183.94Google · CDNUnited States
AS15169Google LLC
5142.251.20.94Google · CDNUnited States
AS15169Google LLC
5104.21.58.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.155.119Google · CDNUnited States
AS15169Google LLC
5172.67.209.248Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.153.119Google · CDNUnited States
AS15169Google LLC
5142.251.150.119Google · CDNUnited States
AS15169Google LLC
6612--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14F233B72656D4C26976D87D8EC35B709E8B9A513CF42C5A6B0FE3054CB90EFA01A3B1C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Y7/yNWOtA/7xXap6pOF1XRxHD8b45LI+sn83QynyXoXT7XDXGXXXHZ/1/CVhsf+S:YmNNtA/9Kb1ob45LIrn83gYj7zWHXZ/5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:49878:wrVCCACBBh8wyA4IyonbBGSHCQQNBAeCAomFYBCgCJAMbWgaaAIjxp0RBXxyA2b6hQLHSCQBCATrjVACAA+wYFEUUpARtAkM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff8080808080ffff
Perceptual Hash:ed6d9216d492d585
Difference Hash:800202021202c400
Wavelet Hash:fef080808080ffff
Color Hash:#6ce083

Other Hashes

Crop Resistant:800202021202c400

Scan History

Scan history not available

Unable to load historical scan data