Security Report: franceprosecurite.fr - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4e3fe187-cd32-432f-84b4-c55a9b7cac8c Domain and IP registration (RDAP)/api/v1/rdap/4e3fe187-cd32-432f-84b4-c55a9b7cac8cHow often this domain was scanned/api/v1/domain/stats/franceprosecurite.fr Scan history for this domain/api/v1/domain/history/franceprosecurite.fr?limit=15

This website contacted 5 IPs in 3 countries across 5 domains to perform 9 HTTP transactions. The main domain is franceprosecurite.fr and was registered 1 year ago.

Submitted URL: https://franceprosecurite.fr

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised WordPress site serving a ClickFix 'Human Verification' overlay that impersonates Cloudflare and instructs Windows users to paste attacker commands via Terminal; EtherHiding blockchain loader and CRITICAL exploit-kit IDS alerts confirm malware distribution.

Risk Factors (6)

Known malicious ClickFix kit (family clickfix-winx-overlay-2026-10) injected into a compromised WordPress site

EtherHiding / blockchain-based payload delivery via Polygon and Tenderly RPC endpoints

Fake Cloudflare 'Human Verification' overlay impersonating Cloudflare while instructing users to run Windows Terminal commands

Obfuscated JavaScript concealing known-attacker hosts (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co)

Single-source threat-intel report of this primary domain as an 'unknown loader (malware)'; multi-source report of 'ek clearfake' on a loaded resource IP 178.16.52.101

Critical and High network IDS alerts (exploit kit activity, EtherHiding exfiltration, Spamhaus DROP inbound traffic)

Domain age information unavailable

Details

Page Title

WordPress > Erreur

Scan Type

public

Favicon Hash

MMH3: 1479791410

MD5: 6c9eb9864de98ecc7adda600033129b6

Domain Name Analysis

You're looking at domain 'franceprosecurite.fr' on the French country-code top-level domain (.fr) while skipping any subdomain. The core label 'franceprosecurite' covers 17 characters split between 7 vowels and 10 consonants. Splitting it apart reveals four words: france, prose, curit, e. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.14s

Total Load Time

49 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR

Text Length:769 chars

Detector Agreement:100%

Language mismatch: Declared as fr-FR but detected as en

Website Classification

Primary Category

technology software59% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

59%

cryptocurrency blockchain

49%

documentation technical

33%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	5.135.23.164	France	AS16276OVH SAS
1	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
1	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
9	5	-	-