Security Report: www.biziexpress.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/477e5e7e-5a5f-4261-bf23-c41271f43fb2 Domain and IP registration (RDAP)/api/v1/rdap/477e5e7e-5a5f-4261-bf23-c41271f43fb2How often this domain was scanned/api/v1/domain/stats/biziexpress.com Scan history for this domain/api/v1/domain/history/biziexpress.com?limit=15

This website contacted 5 IPs in 3 countries across 5 domains to perform 26 HTTP transactions. The main domain is biziexpress.com and was registered 8 months ago.

Submitted URL: https://www.biziexpress.com/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised site serving a ClickFix Win+X overlay kit with EtherHiding blockchain C2 — fake Cloudflare verification lures users into pasting malicious PowerShell. Confirmed malware infection.

Risk Factors (6)

Injected ClickFix Win+X Terminal overlay kit (fake CAPTCHA / human verification)

Primary domain reported as ClearFake malware distribution host

CRITICAL network IDS alert for EtherHiding exfiltration malware

Blockchain RPC (polygon.drpc.org) used as C2/exfil channel — EtherHiding technique

Unranked domain (not in Cisco Umbrella top 1M) masquerading with a legitimate Cloudflare security theme

Fake Cloudflare-branded verification overlay impersonating Cloudflare trust UI

Domain age information unavailable

Details

Page Title

BIZI EXPRESS – Site de rencontre

Scan Type

public

Favicon Hash

MMH3: -1361277238

MD5: ecaa88f7fa0bf610a5a26cf545dcd3aa

Domain Name Analysis

The domain name 'www.biziexpress.com' uses the commercial generic top-level domain (.com) with subdomain 'www'. Its registrable label 'biziexpress' stretches across 11 characters with four vowels and 7 consonants. Splitting it apart reveals three words: biz, i, express. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.02s

Total Load Time

367 KB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR

Text Length:8,674 chars

Detector Agreement:50%

Website Classification

Primary Category

gambling betting61% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

gambling betting

61%

cryptocurrency blockchain

55%

finance banking

37%

entertainment media

37%

documentation technical

36%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	109.234.167.183	France	AS50474O2switch SAS
5	142.251.110.95Google · CDN	United States	AS15169Google LLC
5	104.18.10.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.250.154.94Google · CDN	United States	AS15169Google LLC
5	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
26	5	-	-