Security Scan Report: www.turf-fr.com

Submitted: Apr 19, 2026, 2:40:39 AMCompleted: Apr 19, 2026, 2:42:36 AMpubliccompleted
Loading additional data...

Summary

This website contacted 25 IPs in 4 countries across 27 domains to perform 31 HTTP transactions. The main domain is turf-fr.com and was registered NaN years ago.

Submitted URL: https://www.turf-fr.com

AI Security Verdict

Moderate Risk

Confidence: 94%

5
Risk Score

The site impersonates the PMU brand, uses heavily obfuscated JavaScript to steal credentials, and exhibits multiple high‑risk signals – confirmed phishing scam.

Risk Factors
Brand impersonation (PMU) on unranked domain
Credential exfiltration via obfuscated JavaScript
High JS obfuscation and dynamic code execution
Multiple redirects (4)
Unranked domain reputation
Safety Factors
Domain age > 26 years (well‑established)
No visible password or payment fields in HTML forms
No known Indicators of Compromise from threat intel
No YARA malware matches
No network IDS alerts
Established domain (9718 days old) with no strong malicious indicators — risk clamped from 9 to 5
Domain age information unavailable

Details

Page Title

TURF FR : PMU, Courses PMU, Paris, Pronostics & Résultats

Scan Type

public

Language

🇫🇷

French

(80% confidence)

Category

gambling betting

(41%)

Domain Information

Domain 'www.turf-fr.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'www'. The second-level label 'turf-fr' is 7 characters long containing one vowel alongside five consonants, plus one hyphen. Word splitting yields 2 words: turf, fr. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.turf-fr.com

Page Load Overview

8.91s
Total Load Time
342
HTTP Requests
59
Domains
3.0 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:fr
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:fr
Text Length:28,083 chars
Detector Agreement:80%

Website Classification

Primary Category

gambling betting41% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

gambling betting
41%
education learning
35%
technology software
31%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
30142.251.14.95France
13142.251.20.155Germany
13142.250.154.94United Kingdom
13104.17.24.14United States
AS13335Cloudflare, Inc.
13172.67.73.221United States
AS13335Cloudflare, Inc.
1323.52.181.124Frankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
13142.251.13.100Unknown
13168.119.239.199Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
13104.18.30.212United States
AS13335Cloudflare, Inc.
13142.251.156.119Unknown
34225--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11AC4B4B194E214334213D0D4B9B56B0B7A9AE503D54A4AC4BDEC6BD45FD3DE2EC332A8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:JD/ws3G8LOj9yWjrQaH61cP04WXWWXLXlyl:JDosW8LpWXjP0HpL1c

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:586781:tgBqBAKAQTBgtPpDEWMYN6mSBgZABAmiAESkEgWQiVcZmFAhCgPjZKVAFApEgGIyAGFQAACkC20hxogACAIgwED1gCrANEpC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000000e0e0e0e0
Perceptual Hash:f10e6ce11ec976c1
Difference Hash:640788628c8f9312
Wavelet Hash:0000c7ffe7e1f1e1
Color Hash:#77783a

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data