Security Scan Report: franceinsider.fr

Submitted: Completed: publiccompleted
This website contacted 22 IPs in 2 countries across 14 domains to perform 85 HTTP transactions. The main domain is franceinsider.fr and was registered 1 year 1 month ago.

Submitted URL: https://franceinsider.fr

AI Security Verdict

Confirmed Scam

Confidence: 97%

9
Risk Score

Compromised French blog serving a ClickFix/EtherHiding kit: a fake Cloudflare 'verify you are human' overlay and a blockchain-resolved loader flagged by YARA, the kit roster and CRITICAL malware IDS alerts. Do not follow its instructions.

Risk Factors (6)
Analyst-vetted ClickFix/EtherHiding malware kit injected into the page
Fake Cloudflare human-verification overlay instructing visitors to run keyboard/terminal steps
CRITICAL IDS malware alert for EtherHiding exfiltration
Smart-contract / blockchain RPC callouts used as a payload resolver
Domains reported for malicious content (interseq.at, javascript.skin) loaded as page resources
Primary domain itself carries a single-source malware (iclickfix) threat-intel report
Domain age information unavailable

Details

Page Title

France Insider -

Scan Type

public

Domain Name Analysis

You're looking at domain 'franceinsider.fr' on the French country-code top-level domain (.fr) with no subdomain. The core label 'franceinsider' covers 13 characters with five vowels and 8 consonants. Word splitting yields two words: france, insider. Expect 6.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://franceinsider.fr

Page Load Overview

3.30s
Total Load Time
3.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:68,981 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software56% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
56%
corporate business
54%
corporate
35%
adult content
27%
news/blog
20%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2237.44.245.75Singapore, Singapore
AS47583Hostinger International Limited
3142.251.14.155Google · CDNUnited States
AS15169Google LLC
3104.16.57.10Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.154Google · CDNUnited States
AS15169Google LLC
3104.21.85.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3192.178.183.113Google · CDNUnited States
AS15169Google LLC
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3192.178.183.138Google · CDNUnited States
AS15169Google LLC
3192.178.183.100Google · CDNUnited States
AS15169Google LLC
8522--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EB05F972F840182F9B3F46C4E28ADB1AB1D7A32FF4D94420E1D647684BE5DB8741E267

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:b9D/26tHmX5vNpPDD44ofF5pejZTXF3ft17CKgs9Yf/O9No:t2smX5vNpPDD44Mjpev2/O9m

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:816109:AYggA1ZFAVgdhGGwLA8oAYuVlSCNRAFMB5BUsSqSBUCKXkgQiYQiUiQERIKajGMGAO2IGECGgkMAQRKoGgAyOyzLaHgCMAOU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffcfc3c7cfffff
Perceptual Hash:b131cece333199c9
Difference Hash:0000181c18100000
Wavelet Hash:fcfcccc0c0c0f0f0
Color Hash:#1f5393

Other Hashes

Crop Resistant:0000181c18100000

Scan History

Scan history not available

Unable to load historical scan data