Is lesservicesthomassin.com a scam?

Our automated security review marked lesservicesthomassin.com as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.

Is lesservicesthomassin.com safe to use?

lesservicesthomassin.com currently scores 53/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.

Does lesservicesthomassin.com have a valid SSL certificate?

Yes. lesservicesthomassin.com presents a valid TLSv1.3 certificate issued by Let's Encrypt · R13, expiring in 41 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

Has lesservicesthomassin.com been flagged by antivirus engines?

No. All 92 antivirus engines in our malware network report lesservicesthomassin.com as clean.

Is lesservicesthomassin.com on any phishing or malware blacklists?

No. lesservicesthomassin.com is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is lesservicesthomassin.com hosted?

lesservicesthomassin.com resolves to an IP operated by Google LLC in CA (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the lesservicesthomassin.com report updated?

This is a permanent record of the scan run on June 15, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around lesservicesthomassin.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Security Review

Is lesservicesthomassin.com legit or a scam?

Our verdict:Suspicious· 53/100

SafeSuspiciousDangerous

Compromised WordPress installation defaced with 'Hacked By MR.GREEN' message; legitimate Quebec contractor business exists but site is actively hacked.

Top reasons

Website displays active defacement message 'Hacked By MR.GREEN' in the page header, indicating the site is currently compromised.Only default WordPress placeholder content ('Hello world!' post) is visible; no legitimate business information, services, or contact details appear on the page.Site appears abandoned or under active attacker control with no evidence of legitimate operation or maintenance.

lesservicesthomassin.comScanned 1h ago

Post Facebook

Trust score

SUSPICIOUS

Heuristics 75·MT 40

Category tags

compromised sitewebsite security85% MT confidence

Positive signals (4)

Antivirus clear Not on major blacklists Encrypted connection Clean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence

0/92

All engines report clean

Domain Age

—

Registration date unknown

MT Intelligence

Suspicious

High likelihood · 85% confidence

SUSPICIOUS

Warning signs detected

Compromised WordPress installation defaced with 'Hacked By MR.GREEN' message; legitimate Quebec contractor business exists but site is actively hacked. Several risk indicators suggest caution. This site might be legitimate — but treat it as unverified until you can independently confirm.

Website Preview

LIVE RENDER

lesservicesthomassin.com

1Visual risk score 72/100

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

/ 100

High visual risk

Visual red flags detected in the screenshot

The page header bears a visible defacement string 'Hacked By MR.GREEN' alongside default WordPress placeholder content, indicating this WordPress installation has been compromised and defaced, with no legitimate site content present.

Visual risk72/100

What our vision model saw

4 signals

Site title displayed as 'Hacked By MR.GREEN' in the header navigation, indicating a compromised WordPress installation with defacement text left by an attacker.

Default WordPress placeholder post ('Hello world!' with 'Welcome to WordPress. This is your first post.') visible, indicating the site has no legitimate content and was never properly configured.

Navigation retains a 'Sample Page' link alongside the defacement title, consistent with an abandoned or freshly installed WordPress site that was subsequently compromised.

Combination of defacement branding and unconfigured default content suggests the site is either abandoned or actively under attacker control.

MT Intelligence

Advanced threat intelligence

MT Security Analyst

High scam likelihoodengineMT · Guardiantrust40/100

MT AgentLive web researchVisual inspection

Confidence

The domain belongs to Les Services Thomassin inc., a registered and active construction contractor in Val-Alain, Quebec, with valid RBQ licensing and APCHQ membership. However, the website itself has been compromised — the page displays a defacement message 'Hacked By MR.GREEN' in the header and retains only WordPress's default 'Hello world!' placeholder post from September 10, 2024, with no legitimate business content. Our antivirus network and browser blocklists show no malware or phishing flags, and the hosting IP has a clean abuse record. The defacement is a known generic attack pattern used across multiple compromised WordPress sites. The business's legitimate contact details (phone, email, physical address) are confirmed on independent contractor directories and Facebook, indicating the operator is a real person running a real business — but their website has been hacked and abandoned in its compromised state.

Full dossier

Analysis complete

Page Content

The page displays a defacement header reading 'Hacked By MR.GREEN' alongside WordPress's default 'Hello world!' post dated September 10, 2024. No legitimate business content, service descriptions, portfolio, or contact information is present on the page itself. The site appears to be a freshly installed WordPress instance that was never properly configured before being compromised.

Infrastructure

Hosting IP 35.203.117.116 has a clean abuse score (0/100) with no reported abuse. SSL certificate is valid (Let's Encrypt, 41 days to expiry). Our antivirus network reports 0 detections across 92 engines, and major browser blocklists show no flags. The domain does not redirect or exhibit homoglyph or IDN abuse patterns.

Domain History

WHOIS data is unavailable, preventing direct age verification. However, the defacement message and default WordPress post are dated September 10, 2024, suggesting the compromise occurred around that time or shortly after.

Web Reputation

Les Services Thomassin inc. is a registered, active contractor in Quebec with RBQ licence 5801-1198-01 and APCHQ membership. The business is listed on legitimate contractor directories (trouverunentrepreneur.com) with consistent contact details: phone 418-609-0785, email lesservicesthomassin@gmail.com, physical address 1099 carré Laroche, Val-Alain, QC. No scam reports, complaints, or negative reviews were found. The business also maintains a Facebook presence. The defacement message 'Hacked By MR.GREEN' is a generic attack signature used on multiple compromised WordPress sites, not unique to this domain.

Risk Factors

Website displays active defacement message 'Hacked By MR.GREEN' in the page header, indicating the site is currently compromised.
Only default WordPress placeholder content ('Hello world!' post) is visible; no legitimate business information, services, or contact details appear on the page.
Site appears abandoned or under active attacker control with no evidence of legitimate operation or maintenance.
Visitors entering payment or personal information on this compromised site risk credential theft or malware infection.
The defacement and lack of real content suggest the site operator (the legitimate business) is unaware of or unable to remediate the compromise.

Positive Signals

Les Services Thomassin inc. is a registered, active contractor in Quebec with valid RBQ licence and APCHQ membership.
Business contact details (phone, email, address) are consistent across independent contractor directories and social media.
No scam reports, complaints, or negative reviews found in web searches.
Hosting IP has a clean abuse record with zero reported abuse incidents.
Our antivirus network and browser blocklists show no malware or phishing detections.

AI Recommendation

Do not enter any personal information, payment details, or credentials on this site — it is currently compromised and under attacker control. If you are the business owner (Les Services Thomassin), contact your hosting provider immediately to regain control of the WordPress installation, remove the defacement, and restore legitimate content. If you need services from this business, use the verifie

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for lesservicesthomassin.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

Active · Canada

Site traces back to an actively registered business.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

1 positive

Key findings

7 headline facts from open-web research

The domain lesservicesthomassin.com displays a defaced WordPress page titled "Hacked By MR.GREEN" with default "Hello world!" post dated September 10, 2024.
The site is associated with Les Services Thomassin inc., a registered contractor in Val-Alain, Quebec, Canada, with valid RBQ licence and APCHQ membership.
Business contact details (email lesservicesthomassin@gmail.com, phone 418-609-0785, physical address) appear consistently on legitimate directories like trouverunentrepreneur.com and Facebook.
No scam reports, complaints, or negative reviews found across web searches including Reddit, Trustpilot, or scam-specific queries.
"Hacked By MR.GREEN" is a known generic defacement message used on multiple compromised WordPress sites, not unique to this domain.
Facebook page for the business exists but shows limited activity and insufficient content in recent crawls.
No business registration issues or dissolution records identified; listed as active member in Quebec contractor databases.

Business registration

Status: active · Canada

Les Services Thomassin inc., Val-Alain, QC. RBQ licence 5801-1198-01 (or 58011198), APCHQ member, Alexandre Thomassin, address 1099 carré Laroche, phone 418-609-0785, email lesservicesthomassin@gmail.com. Listed on trouverunentrepreneur.com as renovation/construction contractor.

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

Our research confirmed that Les Services Thomassin inc. is a legitimate, registered contractor business in Val-Alain, Quebec, Canada, with active RBQ licence 5801-1198-01 and APCHQ membership. The business operator, Alexandre Thomassin, maintains consistent contact details (phone 418-609-0785, email lesservicesthomassin@gmail.com, address 1099 carré Laroche) across independent contractor directories and social media. No scam reports, complaints, or negative reviews were found in web searches. However, the website itself is currently defaced with 'Hacked By MR.GREEN' branding and displays only default WordPress placeholder content, indicating the site has been compromised and the business operator may be unaware of or unable to remediate the attack.

Antivirus Engines

Clean pass · verified

Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious58Harmless92Engines

Clean

Kaspersky

Clean

Bitdefender

Clean

Microsoft

Not in pass

ESET-NOD32

Not in pass

Avira

Not in pass

Sophos

Clean

Fortinet

Clean

Google Safebrowsing

Clean

Emsisoft

Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbersNone

Postal addressNot listed

Linked social profiles0

Signal Summary

Several contact red flags

No contact email found anywhere on the page.
No phone number listed on the page.
No postal address visible on the page.

Domain & Encryption

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerLet's Encrypt · R13

ExpiresJul 26, 2026 (41d)

Self-signedNo

Hosting & Technology

HostingGoogle LLC

Server locationCA

Web servernginx

Platform / CMSWordPress

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1301http://lesservicesthomassin.com/
2200https://lesservicesthomassin.com/

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPGoogle LLC

Usage typeData Center/Web Hosting/Transit

Proceed with caution

Our automated review flagged enough risk that you should treat this site as unverified.

Treat lesservicesthomassin.com as unverified
Do not enter credentials or send money until you have independently verified the business.
Verify the business through independent channels
Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.
Never use irreversible payment methods
Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.
Share your experience
If you have additional context, drop a comment below or post on the MalwareTips forum.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

fonts.gstatic.com wordpress.org

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review marked lesservicesthomassin.com as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
lesservicesthomassin.com currently scores 53/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
Yes. lesservicesthomassin.com presents a valid TLSv1.3 certificate issued by Let's Encrypt · R13, expiring in 41 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
No. All 92 antivirus engines in our malware network report lesservicesthomassin.com as clean.
No. lesservicesthomassin.com is not currently listed on the major browser blocklist feeds that modern browsers use.
lesservicesthomassin.com resolves to an IP operated by Google LLC in CA (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on June 15, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around lesservicesthomassin.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

Trust / 100

Final Verdict·lesservicesthomassin.com

SUSPICIOUS

This WordPress site has been hacked and defaced with 'Hacked By MR.GREEN' branding, displaying only default placeholder content. The legitimate business behind it (Les Services Thomassin, a Quebec contractor) exists and is registered, but the website itself is currently non-functional and under attacker control.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Suspicious reports

csiglass-my.sharepoint.com

schoolsecurityleadership.org

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.