ScanMalware.com

Security Scan Report: noemielecorps.fr

Site favicon
Submitted: Sep 21, 2026, 5:47:27 AMCompleted: Sep 21, 2026, 5:47:51 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Legitimate-looking French design blog that is compromised: injected casino SEO-spam and CRITICAL exploit-kit C2 alerts (TA2726/TA569) plus a multi-source malware IoC on a loaded domain indicate active malware distribution. Avoid.

Risk Factors
CRITICAL IDS alerts indicating exploit-kit command-and-control (TA2726 fake WordPress plugin, TA569 Gholoader)
Multi-source malware IoC on a third-party resource loaded by the page (great-basic.com)
Primary domain reported as malware ('iclickfix', single-source)
Injected gambling/casino SEO-spam content and outbound links on a compromised blog
Multiple eval() calls and inline encoding/decoding functions
Domain age information unavailable

Details

Page Title

Design créatif & conscient – Meilleure UX design = meilleur ROI

Scan Type

public

Domain Name Analysis

You're looking at domain 'noemielecorps.fr' on the French country-code top-level domain (.fr) and has no subdomain. Its registrable label 'noemielecorps' stretches across 13 characters split between 6 vowels and seven consonants. Tokenizing the label suggests 4 words: no, emi, ele, corps. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://noemielecorps.fr

Page Load Overview

5.62s
Total Load Time
793 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:3,513 chars
Detector Agreement:75%

Website Classification

Primary Category

gambling betting92% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
92%
entertainment media
84%
blog personal website
65%
education learning
58%
documentation technical
37%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1151.91.236.255France
AS16276OVH SAS
11172.66.43.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11172.66.40.144Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11104.21.0.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
444--

Detected Technologies7

WordPressv7.1
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
WordPress Block Editor
30%
Lightbox
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T107B29833D2B88CE17A6E876D85807368A858E711DF0767D5F0F5A068594CEF604EBB0E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:mpL2WdNJ6Ih7ucOY84r/ZdSZUaAhHkW/N:HWgc9vZdypa9V

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:25486:BIgIhRh0Am0ABYcaAOEmKQwCJCDYYBTAMghggDx2IhAkgg6YMKAdJl2dKMEqSi4aSSliGBIIJYgQE0wxSARagCuPtwDCzXIY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00fffffdffffffff
Perceptual Hash:cb17252d4a1a3d3d
Difference Hash:6348302103030303
Wavelet Hash:00000ef8f9f9f9f9
Color Hash:#2dd28d

Other Hashes

Crop Resistant:6348302103030303,01018a9a8a458101

Scan History

Scan history not available

Unable to load historical scan data