Security Scan Report: atelierdejulie.com

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 7 domains to perform 123 HTTP transactions. The main domain is atelierdejulie.com and was registered 2 years 11 months ago.

Submitted URL: https://atelierdejulie.com

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Compromised small-business site now serving a ClickFix/fake-Cloudflare lure that tricks visitors into pasting a hidden-window PowerShell downloader, with EtherHiding blockchain delivery and critical malware IDS alerts. Do not visit or follow the displayed steps.

Risk Factors (5)
ClickFix social-engineering chain using a fake Cloudflare verification page to get users to paste a PowerShell downloader
EtherHiding malware delivery via blockchain RPC contracts with critical IDS malware and exploit-kit alerts
Deliberate script obfuscation concealing flagged command-and-control / RPC hosts
Domain of the legitimate business appears compromised and injected with SEO spam (Mostbet betting text) and scareware lures
Anti-analysis JavaScript blocking DevTools, right-click and view-source to hamper inspection
Domain age information unavailable

Details

Page Title

Atelier de Julie

Scan Type

public

Domain Name Analysis

You're looking at domain 'atelierdejulie.com' on the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'atelierdejulie' spans 14 characters split between eight vowels and 6 consonants. Breaking it apart gives three words: atelier, de, julie. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://atelierdejulie.com

Page Load Overview

4.38s
Total Load Time
2.5 MB
Total Size

Language Analysis

Primary Language

🇨🇿Czech
Code: cs
Confidence:24%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:2,692 chars
Detector Agreement:50%
Language mismatch: Declared as fr-FR but detected as cs

Website Classification

Primary Category

gambling betting84% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
84%
adult content
60%
education learning
57%
e-commerce shopping
52%
entertainment media
44%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21194.11.214.2Asheville, North Carolina, United States
AS47583Hostinger International Limited
17142.251.110.95Google · CDNUnited States
AS15169Google LLC
17192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
17104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17142.251.13.94Google · CDNUnited States
AS15169Google LLC
17178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
17172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1237--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F1164A17CE473D998FA17A1731CD18EA061D63EB206100DEA52FC7DAC3BA659B8C46DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:8yOz5M2EFpOz5M2EFvOz5M2EFpOz5M2EFJOz5M2EFpOz5M2EFvOz5M2EFpOz5M2i:8cP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4331906:tQgAQFzYFsAPySBb0BgAigQEJC5Si0DKpUFAwgEAAACAiEcQEBCYBdgIHLQMGCwREGiiBVRS2vgUAMR4kR6AP5JBtKFIDBQI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc7c3c3fffffff7
Perceptual Hash:b03193c7c6ccccce
Difference Hash:1818163600000008
Wavelet Hash:f8c0c0c03f3fff00
Color Hash:#783a3f

Other Hashes

Crop Resistant:1818163600000008

Scan History

Scan history not available

Unable to load historical scan data