Security Scan Report: cne.paris

Site favicon
Submitted: Sep 22, 2026, 2:47:27 AMCompleted: Sep 22, 2026, 2:47:55 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 75%

8
Risk Score

Legitimate-looking swim club site, but critical IDS EtherHiding exfil alert plus a multi-feed malware-flagged external resource (xaz2.com) and blockchain RPC traffic indicate the page is compromised and serving malicious script.

Risk Factors (4)
Critical network IDS malware alert indicating active exfiltration behavior
Multi-feed malware-flagged external resource (xaz2.com) loaded by the page
Communication with blockchain RPC infrastructure used as an EtherHiding C2 vector
Threat-intel indicator against the primary domain itself (unverified, single source)
Domain age information unavailable

Details

Page Title

HOME PAGE - CNE Paris

Scan Type

public

Domain Name Analysis

You're looking at domain 'cne.paris' on the .paris top-level domain while skipping any subdomain. Its registrable label 'cne' stretches across 3 characters with one vowel and two consonants. It segments into two words: c, ne. Median word length comes out to 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cne.paris

Page Load Overview

3.91s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:3,283 chars
Detector Agreement:50%

Website Classification

Primary Category

education learning92% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
92%
corporate
35%
government public service
27%
news/blog
20%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17217.70.180.139France
AS29169GANDI SAS
15104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15142.251.13.95Google · CDNUnited States
AS15169Google LLC
1535.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
15188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15142.251.20.94Google · CDNUnited States
AS15169Google LLC
926--

Detected Technologies8

WordPressv7.0.2
100%
JQueryv3.7.1
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15BE22872914844853B5EE7C9F2E3322CC144A957DA11A7B7B0FDA15C45B89FB00ABE2F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:S9i5Q62I/xE6x4g5bn/WDLJ7Zdyp62pAEx47YgVXR:oiCbJLypuz7YgVXR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:32974:SAKApGAGMEDsIRUCMVSQg5SVRINpDAhIZkCZFCkEOkkHAXpFlwSYxkMcaZ5EYEiECAAAhABASoEAFEHELECNwAAqBHCgIAIp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0081b1b9fbffffff
Perceptual Hash:ef6f12106d45147d
Difference Hash:2969635353021d17
Wavelet Hash:00818191b1ffffc7
Color Hash:#784f3a

Scan History

Scan history not available

Unable to load historical scan data