Security Scan Report: duquai.com

Redirected to:
https://www.duquai.com/
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 4 countries across 10 domains to perform 52 HTTP transactions. The main domain is duquai.com and was registered 26 years ago.

Submitted URL: https://duquai.com

Effective URL:
https://www.duquai.com/
Redirected

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Legitimate old French cognac producer's WordPress site appears compromised: page URL flagged as malware by two feeds, and injected gambling/SEO-spam posts and a Latrodectus-flagged third-party resource are present.

Risk Factors (5)
Primary URL flagged as malware by two independent threat feeds
WordPress site compromised with injected gambling/SEO spam links and posts
Loads third-party resource from a Latrodectus-malware-flagged domain
HIGH-severity Suricata/Sphaus DROP IDS alert
Cisco Umbrella: domain unranked
Domain age information unavailable

Details

Page Title

Cognac DUQUAI - Nos produits

Scan Type

public

Domain Name Analysis

Domain 'duquai.com' uses the commercial generic top-level domain (.com). The core label 'duquai' covers 6 characters with 4 vowels and two consonants. Word splitting yields 2 words: du, quai. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://duquai.com

Page Load Overview

30.35s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:1,235 chars
Detector Agreement:75%

Website Classification

Primary Category

social media network98% confidence
Type: static
Method: ml+structural

All Detected Categories

social media network
98%
news media journalism
68%
phishing scam
59%
gambling betting
57%
technology software
39%

Detected Features

Articles
Comments
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7188.130.25.202Villeneuve-la-Garenne, Île-de-France, France
AS34177Celeste SAS
5188.130.25.102Villeneuve-la-Garenne, Île-de-France, France
AS34177Celeste SAS
5192.178.170.95Google · CDNUnited States
AS15169Google LLC
5192.178.183.94Google · CDNUnited States
AS15169Google LLC
5146.75.120.157Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
5185.199.111.133Fastly · CDNUnited States
AS54113Fastly, Inc.
5172.66.0.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
591.92.241.13Amsterdam, North Holland, Netherlands
AS202412Omegatech LTD
5185.199.110.133Fastly · CDNUnited States
AS54113Fastly, Inc.
5210--

Detected Technologies4

WordPressv5.0.27
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14BC1C67B2A09DC0B13F110A6F07F720D9E2E8946D284DD768999553C25F9FF480B6E0E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:mJBTlqa2UJb3O3EgVmn7ms0ftkFfiZtmn3tRhLwaAk:m9qa/N1mmKs01kdh3SDk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6075:SogQEMSAiXAESZZkgAAGEAQABQGpWhAMSAQDAwABIABGiQMGQhLkgBGGABCaAAZhBAyQAKFsDTBIJSCoAZPgCJAoyEABCCCA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc3c3c3ffffefef
Perceptual Hash:b12c93ce93c36599
Difference Hash:0e96960e00224a4a
Wavelet Hash:c2828383cbc3ebeb
Color Hash:#2d6586

Scan History

Scan history not available

Unable to load historical scan data