Security Scan: Simeli Cuir

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d9e39960-4915-4c46-94f6-21b2307cff0a Domain and IP registration (RDAP)/api/v1/rdap/d9e39960-4915-4c46-94f6-21b2307cff0a Certificate Transparency/api/v1/ct/simelicuir.fr How often this domain was scanned/api/v1/domain/stats/simelicuir.fr Scan history for this domain/api/v1/domain/history/simelicuir.fr?limit=15

This website contacted 9 IPs in 3 countries across 9 domains to perform 66 HTTP transactions. The main domain is simelicuir.fr and was registered 21 years ago.

Submitted URL: https://simelicuir.fr/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate 5-year-old French leather-craft site is compromised and now serves a ClickFix kit: a fake Cloudflare 'Human Verification' overlay telling Windows users to paste into Terminal, plus Macfinger AMOS stealer loaders (2 CRITICAL YARA hits, multiple CRITICAL IDS malware alerts). Do not interact.

Risk Factors (6)

Injected ClickFix malware kit on a site whose real content is handmade leather goods (compromised site)

Fake 'Human Verification' overlay impersonating Cloudflare, instructing Terminal paste-and-run

CRITICAL YARA stealer/phishing matches plus roster-anchored known malicious kits

Network IDS CRITICAL malware/C2 alerts (AMOS ClickFix loader, EtherHiding exfiltration)

Unranked third-party script host vale-quaeum-a4hc9.top contacted via sendBeacon; blockchain RPC endpoints loaded by page scripts

Threat-intel report against the primary domain simelicuir.fr (misp.scanmalware.com, single-source 'iclickfix')

Domain age information unavailable

Details

Page Title

Simeli Cuir

Scan Type

public

Favicon Hash

MMH3: 1198047028

MD5: 000bf649cc8f6bf27cfb04d1bcdcd3c7

Domain Name Analysis

Domain 'simelicuir.fr' uses the French country-code top-level domain (.fr) while skipping any subdomain. The registrable portion 'simelicuir' spans 10 characters containing five vowels alongside 5 consonants. Splitting it apart reveals 4 words: sim, eli, cui, r. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.91s

Total Load Time

861 KB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR

Text Length:4,386 chars

Detector Agreement:67%

Website Classification

Primary Category

adult content75% confidence

Type: spa

Method: ml+structural

All Detected Categories

adult content

75%

healthcare medical

32%

government public service

30%

Detected Features

Products

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	193.203.239.46	France	AS210403Groupe LWS SARL
7	142.251.110.95Google · CDN	United States	AS15169Google LLC
7	77.221.153.211	Paris, Île-de-France, France	AS210644Aeza Group LLC
7	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
7	142.251.14.94Google · CDN	United States	AS15169Google LLC
7	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
7	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
7	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
66	9	-	-