Scan report · 2 months agoPublic

www.docteur-garcia.com

217.160.0.145AS8560 · DE

Submittedhttps://www.docteur-garcia.com/

page reads command-and-control from a blockchain node while presenting no crypto context (polygon.lava.build)

Engine tags

EtherHiding

Verdict

3 of 7 enginesMaliciousAutomated

Own this site?

Dangerous — confirmed threat

Automated

It is listed on external threat-intelligence feeds. We found strong evidence that this site is malicious — for example a phishing page, a scam, or hostile code. Treat anything it asked for (passwords, card details, codes) as exposed.

What to do

Do not enter any information or download anything. If you already did, change those passwords now and contact your bank if payment details were involved. Block or report the link to your team.

This reflects the evidence found at the time of the scan. If you believe it is a mistake, you can escalate it for analyst review.

Findings

Strongest first

Suspicious fileSuspicious content in the downloaded file

db31271c-21d8-4260-9ce1-1f80ffa60b4d.html

Our Content Inspection engine downloaded the file this URL serves and analyzed it. The payload shows traits commonly seen in malware. Treat it as unsafe until verified.

Success

SHA-256 a29df06dc4ad1a4f47522e024b3a0b3e12d8740f62104a6be0b4329c2df984e7

InfoCross-domain scripts injected at runtime

6 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP: 217.160.0.145IONOS-AS - IONOS SE, DE · AS8560DE
TLS: CN=Sectigo Public Server Authentication CA DV R36, O=Sectigo Limited, C=GB · expires Oct 9, 2026

WHOIS

Registrar: Gandi SAS
Created: Mar 21, 2011
Expires: Mar 21, 2027
Nameservers: ns61.1and1.frns62.1and1.fr

24 malicious9 suspicious

Hashes & fingerprints

Page Hasha880e780d4bccfe9c53b4556262f7fbb1e9fab3dd84ed1c177d0d9d1d214443d Favicon Hasha1f0bc8e61f199534b8eb123944d1661e4242f20daabfe135d3d951e1cdf419a DOM Hash6d92e07eb67b9bf24cea9d6db589bd495734d6ec0d1fe7be69c4b0176757de29 Screenshot pHashd604d9f493419b9b JARM29d29d00029d29d00042d42d0000002059a3b916699461c5923779b77cf06b JA4Xa373a9f83c6b_7022c563de38_a7d8059b5276 Cert Thumbprint1707C71D8058047723A0E487C15F484D817F273E Cert IssuerCN=Sectigo Public Server Authentication CA DV R36, O=Sectigo Limited, C=GB

Page capture

Live

Title “Chirurgie et médecine esthétique à Paris – Docteur Philippe Garcia – ique, spécialiste en chirurgie plastique reconstructrice, le Docteur Philippe Garcia vous accueille dans son cabinet du 15e arrondissement de Paris”

Visit Site

Engines

7 · time to verdict