Security Scan Report: yen-coaching.fr

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 3 countries across 7 domains to perform 51 HTTP transactions. The main domain is yen-coaching.fr and was registered 1 year 8 months ago.

Submitted URL: https://yen-coaching.fr

AI Security Verdict

High Risk

Confidence: 93%

9
Risk Score

Legitimate-looking French coaching site whose WordPress appears compromised: injected ErrTraffic/Exvicy loader uses EtherHiding (blockchain C2) with CRITICAL malware-exfiltration IDS alerts. Visitors risk malware; avoid.

Risk Factors (5)
Analyst-vetted malicious WordPress loader (ErrTraffic/Exvicy) injected into the page
EtherHiding: command-and-control / next-stage address fetched from a smart contract
Obfuscated JavaScript concealing blockchain RPC and exploit-kit hosts
CRITICAL network IDS malware/exfiltration alerts (EtherHiding Exfil M2, x4)
Third-party resource with multi-feed malicious 'ek clearfake' reputation
Domain age information unavailable

Details

Page Title

Yen Coaching

Scan Type

public

Domain Name Analysis

Within the French country-code top-level domain (.fr), 'yen-coaching.fr' is registered without a subdomain. Count 12 characters in 'yen-coaching' containing 4 vowels alongside seven consonants; it also includes 1 hyphen. Breaking it apart gives two words: yen, coaching. The median word length lands at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Qen Coaching Quisuisje? Accompagnement Médiumnité Tu veux attirer [ame soeur dans la vie et manifester ta vision du couple idéal ? Je veux un couple de rêve !

Page Load Overview

2.11s
Total Load Time
888 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:2,000 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content78% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
78%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9109.234.162.89France
AS50474O2switch SAS
7142.251.110.95Google · CDNUnited States
AS15169Google LLC
7188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
735.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
7188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
764.130.32.46Frankfurt am Main, Hesse, Germany
AS20326TeraSwitch Networks Inc.
517--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17BD3E9B177A0297A327B037DE557F60865598A33D64E73E6F4BEC19841D8F9320A230E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:QjnAlnK+GuVNHhJiZyp+znzRTFCdRLIYwkGa+u9UZq3iLrp5BpeR3:QkL0z/YwkGa+QUZq3iZ7peZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:134212:hFBdFJkFAgAyCBCEAQlVXUERCAUDcdCgEXAQ1AgFQOaMtUMCgTpkGYEsgEbCBCeFpACAN3HeoCiIiggSaA4BZhAgGBpUvLqA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff9c0c0c0e0ffdf
Perceptual Hash:fb6b84c4b496348b
Difference Hash:260b191911010094
Wavelet Hash:ffc080c0c0c0ffdf
Color Hash:N/A

Other Hashes

Crop Resistant:260b191911010094

Scan History

Scan history not available

Unable to load historical scan data