Security Scan: Céline Gronek

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/60909419-b5f7-484d-9f5d-2b0de71b01d6 Domain and IP registration (RDAP)/api/v1/rdap/60909419-b5f7-484d-9f5d-2b0de71b01d6 Certificate Transparency/api/v1/ct/celine-gronek.fr How often this domain was scanned/api/v1/domain/stats/celine-gronek.fr Scan history for this domain/api/v1/domain/history/celine-gronek.fr?limit=15

This website contacted 23 IPs in 6 countries across 17 domains to perform 80 HTTP transactions. The main domain is celine-gronek.fr and was registered 21 years ago.

Submitted URL: https://celine-gronek.fr/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised personal portfolio injecting a ClickFix/AMOS stealer and ClearFake EtherHiding chain: 3 CRITICAL YARA hits, 4 analyst-vetted kit sightings, and CRITICAL IDS exfiltration alerts. Do not visit; block the domain.

Risk Factors (7)

Three CRITICAL high-precision YARA rules match the page HTML (ClickFix/AMOS stealer, ClearFake Polygon contract loader, Win+X ClickFix overlay phishing)

Analyst-vetted kit roster confirms Macfinger ClickFix and ClearFake malicious kit families on the page

CRITICAL IDS alerts for EtherHiding exfiltration and AMOS ClickFix loader request

Cross-origin fetch/sendBeacon to unranked attacker-controlled hosts trackerredirect.online and vale-quaeum-a4hc9.top

Blockchain RPC calls (polygon.drpc.org, rpc.ankr.com, polygon-mainnet.public.blastapi.io) consistent with EtherHiding server-list retrieval

Third-party resource domain reported as iclickfix malware with multi-feed corroboration (trackerredirect.online, authshipup.net, runtimerailbit.com, servicestatlab.com)

Injected gambling/SEO spam text unrelated to the legitimate portfolio content

Domain age information unavailable

Details

Page Title

Céline Gronek

Scan Type

public

Favicon Hash

MMH3: -453453393

MD5: 5fb821f3b9adb6a0590bcf8a30f3c9f6

Domain Name Analysis

Within the French country-code top-level domain (.fr), 'celine-gronek.fr' is registered while skipping any subdomain. The registrable portion 'celine-gronek' spans 13 characters with 5 vowels and 7 consonants, notching 1 hyphen. Segmentation suggests three words: celine, gro, nek. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.51s

Total Load Time

7.3 MB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR

Text Length:2,778 chars

Detector Agreement:100%

Website Classification

Primary Category

entertainment media100% confidence

Type: spa

Method: ml+structural

All Detected Categories

entertainment media

100%

education learning

100%

blog personal website

100%

corporate business

100%

government public service

100%

Detected Features

Articles

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	184.24.77.134Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	142.251.20.95Google · CDN	United States	AS15169Google LLC
3	77.221.153.211	Paris, Île-de-France, France	AS210644Aeza Group LLC
3	185.92.183.208	Riga, Riga, Latvia	AS56971Cgi Global Limited
3	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	95.100.87.169Akamai · CDN	Milan, Lombardy, Italy	AS20940Akamai International B.V.
3	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
3	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
3	142.251.127.84Google · CDN	United States	AS15169Google LLC
80	23	-	-