Security Report: first-frankfurt.de - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/17655f2d-85a0-4a16-b756-160ed3185d4d Domain and IP registration (RDAP)/api/v1/rdap/17655f2d-85a0-4a16-b756-160ed3185d4dHow often this domain was scanned/api/v1/domain/stats/first-frankfurt.de Scan history for this domain/api/v1/domain/history/first-frankfurt.de?limit=15

This website contacted 5 IPs in 2 countries across 5 domains to perform 75 HTTP transactions. The main domain is first-frankfurt.de.

Submitted URL: https://first-frankfurt.de

Effective URL:

https://www.first-frankfurt.de/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised site serving ClearFake/ClickFix malware: fake Cloudflare 'Human Verification' overlay tells Windows users to paste Terminal commands, with CRITICAL YARA and IDS EtherHiding alerts. Avoid entirely.

Risk Factors (5)

Injected ClearFake blockchain (Polygon EtherHiding) loader on a compromised site, downloading a secondary payload to Windows visitors

Fake Cloudflare 'Human Verification' overlay impersonating Cloudflare protection to coerce users into pasting malicious commands into Windows Terminal

Device-dependent social-engineering payload delivery (ClickFix) resulting in arbitrary code execution on the visitor's machine

Domain registered 1 day ago (weak prior) with no reputation ranking

ClearFake rival-kit cleanup script present, indicating active malicious kit competition on the compromised site

Domain age information unavailable

Details

Page Title

First-Frankfurt – THE GREATEST LITTLE PLACE FOR FASHION

Scan Type

public

Favicon Hash

MMH3: 530492348

MD5: dcab89b8e04bf53fcd7f6a44a8cb4fae

Domain Name Analysis

Domain 'first-frankfurt.de' uses the German country-code top-level domain (.de) while skipping any subdomain. Count 15 characters in 'first-frankfurt' containing three vowels alongside 11 consonants; bonus characters include 1 hyphen. Word splitting yields 2 words: first, frankfurt. Expect seven characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.96s

Total Load Time

4.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:51%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:3,015 chars

Detector Agreement:80%

Language mismatch: Declared as de but detected as en

Website Classification

Primary Category

blog personal website94% confidence

Type: spa

Method: ml+structural

All Detected Categories

blog personal website

94%

e-commerce shopping

90%

adult content

83%

news media journalism

68%

social media network

67%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	217.160.0.130	Germany	AS8560IONOS SE
15	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
15	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
15	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
75	5	-	-