Security Scan Report: flowcode.com

Redirected to:
https://www.cerc-mq.fr/wp-includes/spp/sp/redirect/p/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 2 countries across 6 domains to perform 19 HTTP transactions. The main domain is flowcode.com and was registered 16 years ago.

Submitted URL: https://flowcode.com/p/esGXcLypAz?fc=0

Effective URL:
https://www.cerc-mq.fr/wp-includes/spp/sp/redirect/p/
Redirected

The Cisco Umbrella rank of the primary domain is #92,701 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Compromised WordPress site on cerc-mq.fr impersonating Spotify with a fake 'verify you are not a robot' security interstitial, reached via a flowcode redirect. Brand impersonation on an unrelated, hacked host.

Risk Factors (5)
Impersonation of the Spotify brand on a non-Spotify domain
Page served from a WordPress system path on an unrelated site, indicating a hacked CMS
Fake anti-bot verification interstitial used as a phishing gateway
Cross-domain redirect from a link shortener masking the final destination
Dynamically injected, inconsistent 'IP / Secure Node' indicators to simulate a secure session
Domain age information unavailable

Details

Page Title

Spotify - Security Verification

Scan Type

public

Domain Name Analysis

You're looking at domain 'flowcode.com' on the commercial generic top-level domain (.com). The second-level label 'flowcode' is 8 characters long holding three vowels versus 5 consonants. Tokenizing the label suggests 2 words: flow, code. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

= Spotify Connection Secure Confirm you are not a robot to access your account dashboard. IP: 141,98.255.249 | Secure Node: Active | not a robot & reCAPTCHA CONTINUE

Page Load Overview

1.95s
Total Load Time
1.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:215 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software61% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
61%
entertainment media
57%
documentation technical
56%
adult content
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9145.239.37.162Paris, Île-de-France, France
AS16276OVH SAS
1104.18.35.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.153.119Google · CDNUnited States
AS15169Google LLC
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
1172.64.152.29Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.156.119Google · CDNUnited States
AS15169Google LLC
1142.251.155.119Google · CDNUnited States
AS15169Google LLC
1142.251.157.119Google · CDNUnited States
AS15169Google LLC
1911--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14202C7A626B31412A817D37027B7B34D7532B107E746C9683FAC6354DFCA9E2C462798

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:nkwyeJfPWuoWutCqnkPEK1oEvLQY0ALbJnBa7AI2NcOyn0YP1iwb6YUv7:kqfuuCQoksIo+QmvJhw1iwb7K7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8619:AhIAhcFGIAjEALBCLAqRCD1cQAQAVZiEUEoIKA5CVAuRg0gJECA3RJxHzGiwI6BKskQxgM+ZAIwEAIiKgSQSIIFShFA0IhVa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:efc3dbc3dbdbc3ff
Perceptual Hash:ec643399333399cc
Difference Hash:0814144c14324c08
Wavelet Hash:27031303d3dbc3c3
Color Hash:N/A

Other Hashes

Crop Resistant:0814144c14324c08

Scan History

Scan history not available

Unable to load historical scan data