ScanMalware.com

Security Scan Report: lerecept.fr

Site favicon
Submitted: Sep 20, 2026, 1:47:29 AMCompleted: Sep 20, 2026, 1:48:34 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Legitimate-looking French event venue whose captured page loads blockchain RPC endpoints and triggers CRITICAL EtherHiding/exfil IDS alerts plus a corroborated malware resource — strong evidence the site is compromised and serving a crypto-drainer/malware payload.

Risk Factors (4)
Critical IDS malware alert (EtherHiding Exfil M2) on a site whose visible content is unrelated to blockchain/crypto
Malicious third-party resource xaz2.com (iclickfix) loaded by the page
Blockchain RPC / smart-chain domain traffic (1rpc.io, rpc.sepolia.ethpandaops.io) inconsistent with the site's purpose
Primary domain appears in a stealer-malware threat-intel report
Domain age information unavailable

Details

Page Title

Le Recept' – Salle de Réception & Mariage à Vaulx-Milieu 38

Scan Type

public

Domain Name Analysis

You're looking at domain 'lerecept.fr' on the French country-code top-level domain (.fr) with no subdomain. The registrable portion 'lerecept' spans 8 characters split between 3 vowels and five consonants. It segments into 3 words: le, recep, t. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lerecept.fr

Page Load Overview

44.52s
Total Load Time
11.4 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:7,800 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog70% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
70%
corporate
70%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1451.38.160.26France
AS16276OVH SAS
6142.251.127.95Google · CDNUnited States
AS15169Google LLC
6142.251.156.119Google · CDNUnited States
AS15169Google LLC
6104.18.18.183Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
654.192.35.90Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.20.95Google · CDNUnited States
AS15169Google LLC
6142.251.150.119Google · CDNUnited States
AS15169Google LLC
6104.18.19.183Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
654.192.35.96Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
12820--

Detected Technologies7

WordPressv7.1.1
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
Twitter Emoji (Twemoji)
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T163B3D7A0F7A0217A213B933DF5DBF618526D5613E70E66E2F0BDC08D88C9B9750B161E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:S9i5Q62I/xE6x4g5bn/uOS/1Klny5uvnAltt+SdgQZHfOqCcSAZOfbaKcWWwymM2:oiCgSILnAltt+SeQZHfOqCZbRyprct7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:111561:ooAMiYyIFAAWGMJiAIIEkqBCUINKtBgA1eMQIA1BEQExUADhRAergEKiRniFiftoMEQAMbbGQEABEUJJlSiBrRiLxAAADyBA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c0d018c8c0fcff01
Perceptual Hash:e87c8fe3709f022c
Difference Hash:0131353195c9cbd3
Wavelet Hash:e0d018d8c0fcff2b
Color Hash:#784f3a

Other Hashes

Crop Resistant:b3b330b5b4b4b4b3,0131341096c9cbd3

Scan History

Scan history not available

Unable to load historical scan data