Security Scan Report: visiterlarca.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 32 IPs in 4 countries across 23 domains to perform 295 HTTP transactions. The main domain is visiterlarca.com and was registered 2 years 5 months ago.

Submitted URL: https://visiterlarca.com/

AI Security Verdict

High Risk

Confidence: 94%

9
Risk Score

Legitimate-looking tourism site whose page has been injected with the Macfinger ClickFix AMOS stealer loader; obfuscated scripts and a CRITICAL AMOS IDS alert plus multiple malware IoCs. Do not visit.

Risk Factors (5)
Analyst-vetted malicious kit (Macfinger ClickFix / AMOS infostealer loader) injected into the page
CRITICAL IDS malware alert for the AMOS ClickFix campaign
Obfuscated script hiding multiple malware-associated campaign-tracking hosts
Multiple multi-source content-malware domain matches on loaded third-party resources
Page content is unrelated to the malicious infrastructure it loads (compromised-site pattern)
Domain age information unavailable

Details

Page Title

La République Centrafricaine : Votre prochaine destination La République Centrafricaine : Votre prochaine destination La République Centrafricaine : Votre prochaine destination - Visiter La RCA: République Centrafricaine

Scan Type

public

Domain Name Analysis

You're looking at domain 'visiterlarca.com' on the commercial generic top-level domain (.com) with no subdomain. The core label 'visiterlarca' covers 12 characters containing five vowels alongside 7 consonants. Segmentation suggests 3 words: visite, rl, arca. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://visiterlarca.com/

Page Load Overview

30.54s
Total Load Time
10.4 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:5,250 chars
Detector Agreement:100%

Website Classification

Primary Category

travel tourism97% confidence
Type: spa
Method: ml+structural

All Detected Categories

travel tourism
97%
government public service
84%
blog personal website
55%
adult content
47%
corporate
35%

Detected Features

Search
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16172.67.142.135Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.21.66.214Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
974.125.29.95Google · CDNUnited States
AS15169Google LLC
9185.92.183.208Riga, Riga, Latvia
AS56971Cgi Global Limited
9185.203.5.78Cyprus
AS203273NetCrafters OU
92.58.65.235Frankfurt am Main, Hesse, Germany
AS44051Fornex Hosting S.L.
9192.178.183.94Google · CDNUnited States
AS15169Google LLC
9104.21.8.153Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
9142.251.127.84Google · CDNUnited States
AS15169Google LLC
29532--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BC943AA27F66283E101F12CB9933A34D95BADAB5D512D1E4F6BB015793F9CE032B2214

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:DXV4eUcaEHgHR1+mLD7+LdLkKxcbkQWomWhj:rYj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:435562:ZAYkEhgHVoKDANgFIAgEUsWAhQCUQA0cQAQgAD8CQYECAkg1S+SFAwgJhS6FAUwhhoU2WcDM4IhIaKAQDqwEBwGUA2AgArQK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000010000ffff
Perceptual Hash:a638d807cc68c7ed
Difference Hash:79fdd7e7674ddb00
Wavelet Hash:ff0701010301ffff
Color Hash:#c3c587

Scan History

Scan history not available

Unable to load historical scan data