Security Scan Report: frankrijkinfo.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 3 domains to perform 26 HTTP transactions. The main domain is frankrijkinfo.com and was registered 3 years 10 months ago.

Submitted URL: https://frankrijkinfo.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised WordPress site serving an IClickFix/EtherHiding ClickFix loader: CRITICAL YARA kit hit, three CRITICAL malware IDS alerts, and a blockchain RPC loader channel to a threat-intel-flagged domain.

Risk Factors (4)
Compromised WordPress site repurposed as Korean-language SEO spam blog under a 'FranceInfo' title with unrelated content
Injected ClickFix/EtherHiding loader that fetches an encrypted stage from an Ethereum smart contract for Windows visitors
Critical network IDS malware alerts and C2-style TLS SNI/DNS traffic to zvh4.com
Third-party load-bearing domain zvh4.com corroborated as malware by multiple threat feeds
Domain age information unavailable

Details

Page Title

FranceInfo – France where there is much more than just sun!

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'frankrijkinfo.com' is registered with no subdomain. Count 13 characters in 'frankrijkinfo' holding 4 vowels versus nine consonants. Word splitting yields 4 words: frank, rij, k, info. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://frankrijkinfo.com

Page Load Overview

10.70s
Total Load Time
668 KB
Total Size

Language Analysis

Primary Language

🇰🇷Korean
Code: ko
Confidence:80%
Script:Hangul
Direction:ltr

Detection Details

HTML Lang Attribute:ko-KR
Text Length:3,380 chars
Detector Agreement:75%

Website Classification

Primary Category

healthcare medical65% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

healthcare medical
65%
forum
25%
news/blog
20%

Detected Features

Search
Articles
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10203.245.29.4South Korea
AS4766Korea Telecom
8104.26.12.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
263--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10683E9B313DB757F2719D79856D0B20816C3953DCDA2ABD9E0AA500C6DA0EEF49C1A0F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:8F7d9J+GRypDppppp41yUpQ1k5Gv4c8j166TScgJ2T8Ue/+zLVBgf74g+mhNrYeE:8RdyGMhj8g+mhNrYele

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:87377:ICxEWXAYAAI5AHdiCQKAx9ThCI5bpGQA3SRUCCG4EAPgBCjPJYJhXUhLeiNgJQcKIDFBFBoMzARwqgDkEAhFewnOZFIAAIKr

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9dfdc39b9b879f8f
Perceptual Hash:bcc3d2c31c8e31e3
Difference Hash:31393623363e263e
Wavelet Hash:9d9c839b8b839b83
Color Hash:#d2797e

Other Hashes

Crop Resistant:31393623363e263e

Scan History

Scan history not available

Unable to load historical scan data