Security Scan Report: atelier-maloet.fr

Site favicon
Submitted: Oct 14, 2026, 6:03:33 PMCompleted: Oct 14, 2026, 6:04:25 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Legitimate-looking 5-year-old French WooCommerce shop whose pages are compromised with an analyst-vetted ClickFix/EtherHiding malware loader; critical IDS and multi-source threat-intel hits confirm malicious code delivery. Avoid.

Risk Factors (5)
ClickFix / EtherHiding malware loader injected into the page (compromised WooCommerce site)
EtherHiding: next-stage payload address retrieved from an Ethereum Sepolia smart contract, defeating static blocklists
Obfuscated JavaScript concealing connections to flagged blockchain/RPC hosts
Critical IDS malware alerts for DNS/TLS traffic to zvh4.com and gateway.tenderly.co
Multi-source malware threat-intelligence match on a resource loaded by the page
Domain age information unavailable

Details

Page Title

Boutique Atelier Maloet

Scan Type

public

Domain Name Analysis

The domain 'atelier-maloet.fr' uses the French country-code top-level domain (.fr) and has no subdomain. The second-level label 'atelier-maloet' is 14 characters long containing seven vowels alongside six consonants; bonus characters include one hyphen. Word splitting yields three words: atelier, malo, et. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://atelier-maloet.fr

Page Load Overview

6.22s
Total Load Time
2.4 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:10,148 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical33% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
33%
e-commerce shopping
28%
blog personal website
26%

Detected Features

Search
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10146.59.209.152France
AS16276OVH SAS
9142.251.14.95Google · CDNUnited States
AS15169Google LLC
9192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
9192.0.77.2San Francisco, California, United States
AS2635Automattic, Inc
9104.18.7.168Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.20.94Google · CDNUnited States
AS15169Google LLC
923.36.158.179Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
9192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
935.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
9104.18.6.168Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10011--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14444F8F3C3AC04B923BB55C828043BC9F04A1116D58796E4F5BDA76867C48E261FB69F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:YRdkigeJs9BuFvGOk6Uk6k07kfzgkH5bMi3GAEfoE37CAEf0z4etzWFfbye/m19G:YRdSBoUr3x6lljeml

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:255056:BYBKTzNnzRCQJAABoaiQah2TESLI+AEAlnTZUoAADqoHNy0LVZAAAIYEggRApGGqGMMqLIAMAgoIkw9jShohIFiiIyJFIJQa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfffc3ffe7c78100
Perceptual Hash:bed81fb450ad102f
Difference Hash:323a26140d2e6b69
Wavelet Hash:dbdf00e7e7c78100
Color Hash:#6fac53

Other Hashes

Crop Resistant:323a26140d2e6b69

Scan History

Scan history not available

Unable to load historical scan data