ScanMalware.com

Security Scan Report: editions-canaima.com

Site favicon
Submitted: Sep 23, 2026, 2:47:27 AMCompleted: Sep 23, 2026, 2:48:09 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Legitimate 22-year-old French publisher site that has been compromised: it loads threat-intel-flagged malicious domains and triggers a CRITICAL AMOS ClickFix malware-loader IDS alert, with injected casino/steroid SEO spam. Avoid.

Risk Factors
Network IDS flags a CRITICAL AMOS ClickFix malware loader request from the page
Page loads third-party domains flagged as exploit-kit / malicious host by multiple feeds
Primary domain itself is flagged as malware ('iclickfix')
Injected gambling, casino and pharmaceutical SEO spam content unrelated to the publishers' business
Compromised/hijacked legitimate domain being abused to serve malicious scripts
Domain age information unavailable

Details

Page Title

editionscanaima

Scan Type

public

Domain Name Analysis

The domain 'editions-canaima.com' uses the commercial generic top-level domain (.com) without a subdomain. The core label 'editions-canaima' covers 16 characters with eight vowels and 7 consonants, along with one hyphen. Tokenizing the label suggests 4 words: editions, can, aim, a. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://editions-canaima.com

Page Load Overview

3.96s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:1,356 chars
Detector Agreement:50%

Website Classification

Primary Category

e-commerce shopping61% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
61%
gambling betting
60%
entertainment media
42%
adult content
26%
news/blog
20%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11213.158.93.26Italy
AS34762Combell NV
9142.251.14.95Google · CDNUnited States
AS15169Google LLC
962.60.155.142Iran
AS203273NetCrafters OU
9142.250.154.94Google · CDNUnited States
AS15169Google LLC
9188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.21.95.226Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.20.113Google · CDNUnited States
AS15169Google LLC
9142.251.150.119Google · CDNUnited States
AS15169Google LLC
748--

Detected Technologies9

WordPressv7.1.1
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
OWL Carousel
50%
MySQL
50%
WooCommerce
20%
Slider Revolution
20%
Lightbox
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T128929573E05804567F0F9BADD1D27218E5A8F612DA05A7BE74F8212C86B4DF700E7A1E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:lbPLA5SlQgr/ZdSZUaAGHkW+wMy5Z3qjN:ZLsMhZdypx9+/y5Z3qx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:19975:hgMAFECTMF1KWgglidqAmnIqNAXkICEoIAcaChIkGSgNEEYhheGAQiFJwKLFoJoDDiAFMZpQNkkFCBCAIHGy1LBwaFKwDQaB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff838183838383
Perceptual Hash:bdc3c08ec1392e3e
Difference Hash:440a3b3b33333b33
Wavelet Hash:ffff838181838383
Color Hash:#9653ac

Other Hashes

Crop Resistant:440a3b3b33333b33,ec56db7f39fd96a2

Scan History

Scan history not available

Unable to load historical scan data