Security Scan Report: cerealeworldafrica.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 3 countries across 8 domains to perform 122 HTTP transactions. The main domain is cerealeworldafrica.com and was registered 1 year 7 months ago.

Submitted URL: https://cerealeworldafrica.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Legitimate-looking cereal company site compromised with an injected ErrTraffic/Exvicy ClickFix loader; obfuscated JS uses EtherHiding blockchain lookups and contacts flagged hosts. Do not visit.

Risk Factors (4)
Injected ErrTraffic/Exvicy WordPress loader (known malicious kit, CRITICAL)
EtherHiding blockchain-based payload retrieval with CRITICAL network IDS exfiltration alert
Obfuscated JavaScript concealing multiple known-malicious C2/RPC hosts
Scripts contacting multi-feed-flagged external domains
Domain age information unavailable

Details

Page Title

Céreale Word Africa – Transformation de produits agro-alimentaire

Scan Type

public

Domain Name Analysis

Domain 'cerealeworldafrica.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'cerealeworldafrica' spans 18 characters holding 8 vowels versus ten consonants. Tokenizing the label suggests four words: cereal, e, world, africa. Median word length comes out to 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

© touboulecereale@gmail.com Re (+33) 603 93 04 34 © Bureau officiel 3rue du berry 10 000 Troyes-France f d © APPELEZ-NOUS MAINTENANT D (+33) 603 93 04 34 Accueil Actualités APropos Contact Un Grain...

Page Load Overview

9.50s
Total Load Time
7.7 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:4,392 chars
Detector Agreement:75%

Website Classification

Primary Category

government public service66% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
66%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22109.234.167.133France
AS50474O2switch SAS
20142.251.13.95Google · CDNUnited States
AS15169Google LLC
20198.23.142.14Buffalo, New York, United States
AS36352HostPapa
2064.130.32.46Frankfurt am Main, Hesse, Germany
AS20326TeraSwitch Networks Inc.
20142.251.14.94Google · CDNUnited States
AS15169Google LLC
20192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
1226--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12AF3C430B9A0092905878345A2F3B75E4069E663CE524CFDF7FE0215ABD5DDC638B62A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:GeIG+zQrJGOaysHzs82f85btzDNYv0J6qG+92WGozqU+SuuumcCwh33wLsp:DsHzs82fU7FI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:165356:gUoHJB3EISBxChEiggQDGkEIhEBRwBAEs5TpJhCkIoQIIoIwygQYIMA6ASOd8gULQARCCHCRBCOACkk/iEMD5NUIVCUIAhUE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff000969670604
Perceptual Hash:a2e8fca9aa3a2a4e
Difference Hash:179e2dd9d7ddcc0c
Wavelet Hash:ffff040d6b072604
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data