Security Scan Report: www.manini.fr

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 3 countries across 5 domains to perform 153 HTTP transactions. The main domain is manini.fr and was registered 18 years ago.

Submitted URL: https://www.manini.fr/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised French jewelry site (manini.fr) now serving a ClickFix fake 'Cloudflare Human Verification' overlay with ErrTraffic/Exvicy WordPress loader — user is told to paste terminal commands. Critical malware-kit and IDS hits; do not interact.

Risk Factors (5)
Injected ClickFix 'Human Verification' overlay directing users to paste PowerShell/terminal commands (Win+X → Terminal → Ctrl+V → Enter)
ErrTraffic/Exvicy compromised-WordPress loader with XOR/Base64 obfuscation and dynamic code execution (new Function)
CRITICAL IDS alert for malware exfiltration (EtherHiding Exfil M2) and blockchain RPC callback infrastructure
Threat-intel corroborated reports against the page's own domain and its loaded third-party resources
Fake Cloudflare verification branding on a domain that is not Cloudflare
Domain age information unavailable

Details

Page Title

Des bijoux, des pièces uniques imaginées par Virginie François-Sorton | La collection de Manini

Scan Type

public

Domain Name Analysis

Domain 'www.manini.fr' uses the French country-code top-level domain (.fr); it also runs on subdomain 'www'. The core label 'manini' covers 6 characters split between three vowels and 3 consonants. Tokenizing the label suggests three words: man, in, i. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.manini.fr/

Page Load Overview

12.76s
Total Load Time
10.8 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:1,460 chars
Detector Agreement:67%

Website Classification

Primary Category

social media network100% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
100%
news media journalism
47%
adult content
37%
e-commerce shopping
36%
technology software
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
27109.234.162.57France
AS50474O2switch SAS
21142.251.14.95Google · CDNUnited States
AS15169Google LLC
21150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
21178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
21142.251.14.94Google · CDNUnited States
AS15169Google LLC
21142.251.110.95Google · CDNUnited States
AS15169Google LLC
21132.145.155.63Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
1537--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T154B335733D4B983A415B45CBB027B70C90EBCAF6D62394E0F7FA526863B1D903693199

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:TlSutwTvRb+lQWkSS5obBUnlbA0GKWWOa8Hglq4GNFNgCts6MUNsUMogYzW2ynIf:TlS/lqr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:115677:g2CIYMAAITOyIA0lOia5XEAUQDnGCIKElhIyCJiyCBUE6AUKcCEKkAIE4EmhBxTBmAgBYYOlAAzJEGCQI15EIUEYSgQEALkB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0f0f0f09098f8f8f
Perceptual Hash:bb1c96c44970de87
Difference Hash:3b181b1b5b1b181b
Wavelet Hash:0f0f0f090b8f8f8f
Color Hash:#86802d

Scan History

Scan history not available

Unable to load historical scan data