ScanMalware.com

Security Scan Report: turcoisse.fr

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/dd9d3072-bdb7-4edf-a142-2938019d8372Domain and IP registration (RDAP)/api/v1/rdap/dd9d3072-bdb7-4edf-a142-2938019d8372How often this domain was scanned/api/v1/domain/stats/turcoisse.frScan history for this domain/api/v1/domain/history/turcoisse.fr?limit=15
This website contacted 12 IPs in 3 countries across 9 domains to perform 40 HTTP transactions. The main domain is turcoisse.fr and was registered 8 months ago.

Submitted URL: https://turcoisse.fr

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Compromised site serving an injected ClickFix/ErrTraffic kit: a fake Cloudflare 'Human Verification' overlay that social-engineers Windows users into pasting malicious Terminal commands, plus EtherHiding RPC traffic. Do not interact.

Risk Factors (5)
Injected ClickFix social-engineering overlay instructing Windows users to paste attacker-supplied commands into Terminal (PowerShell execution).
Injected ErrTraffic/Exvicy WordPress loader using obfuscated Base64 + XOR + new Function code generation.
Fake Cloudflare 'Human Verification' / Ray ID branding used to lend legitimacy to the lure.
EtherHiding / blockchain RPC traffic used for command-and-control or payload delivery via smart-contract infrastructure.
Primary domain turcoisse.fr matched in threat intelligence as an unknown malware loader.
Domain age information unavailable

Details

Page Title

Accueil - Turcoisse

Scan Type

public

Domain Name Analysis

The domain 'turcoisse.fr' uses the French country-code top-level domain (.fr). The core label 'turcoisse' covers 9 characters holding 4 vowels versus 5 consonants. Word splitting yields 3 words: turco, is, se. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://turcoisse.fr

Page Load Overview

11.03s
Total Load Time
670 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:732 chars
Detector Agreement:25%

Website Classification

Primary Category

technology software47% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
47%
cryptocurrency blockchain
46%
corporate
35%
documentation technical
31%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7138.219.43.214Rosario, Santa Fe, Argentina
AS27823Dattatec.com
3142.251.13.95Google · CDNUnited States
AS15169Google LLC
3152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
3104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3192.178.183.94Google · CDNUnited States
AS15169Google LLC
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
335.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
3142.251.20.95Google · CDNUnited States
AS15169Google LLC
3142.251.20.94Google · CDNUnited States
AS15169Google LLC
4012--

Detected Technologies6

WordPressv7.1.3
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T100B3F9B1A7B019BE267B43BDD457F208657C8523DA0E73E9F4EDC09A41D9FA210A170E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:RNBnAlnXE++jnFOypqs07VztY/tUTcAgSP3Ejn/K8IG7ewjfzRj:RNpnYs0+AgSP3E7K8IGqwfF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:117959:BAWCQyCgAkClYkGAhAAZoFMhAD1GATiJJmJ0xFRBKwCAQAMvMA+QNMiRlGCBIExiD4ACkBgWAggKRAMNQHUASmUEQKkBIAkH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:c343636363635373
Difference Hash:c832682000000000
Wavelet Hash:003c3c100f0f0f0f
Color Hash:#87acc5

Other Hashes

Crop Resistant:16361791b189a9a8,c832682000000000

Scan History

Scan history not available

Unable to load historical scan data