Security Scan Report: melney.fr

Redirected to:
https://www.melney.fr/
Site favicon
Submitted: Oct 14, 2026, 4:17:47 PMCompleted: Oct 14, 2026, 4:18:28 PMpubliccompleted

This website contacted 8 IPs in 2 countries across 7 domains to perform 73 HTTP transactions. The main domain is melney.fr and was registered 1 month ago.

Submitted URL: https://melney.fr

Effective URL:

https://www.melney.fr/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Legitimate-looking French consultancy site (melney.fr) whose page has been compromised: an obfuscated IClickFix/EtherHiding ClickFix loader is injected, confirmed by analyst-vetted kit roster, YARA and CRITICAL IDS malware alerts.

Risk Factors (4)
Compromised page injecting an IClickFix/EtherHiding ClickFix loader into visitors' browsers
Obfuscated JavaScript with concealed threat-intel hosts and blockchain-sourced second stage
CRITICAL network IDS malware alerts (ClickFix domain, EtherHiding exfiltration)
Multi-feed 'iclickfix' malware indicator on loaded third-party domain zvh3.com
Domain age information unavailable

Details

Page Title

Melney

Scan Type

public

Domain Name Analysis

The domain name 'melney.fr' uses the French country-code top-level domain (.fr) with no subdomain. The registrable portion 'melney' spans 6 characters split between 2 vowels and four consonants. It segments into 2 words: mel, ney. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://melney.fr

Page Load Overview

3.27s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:3,519 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business71% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
71%
technology software
70%
government public service
46%
social media network
40%
cryptocurrency blockchain
37%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1051.159.125.75Paris, Île-de-France, France
AS12876Scaleway SAS
9142.251.156.119Google · CDNUnited States
AS15169Google LLC
9142.250.154.94Google · CDNUnited States
AS15169Google LLC
9142.251.150.119Google · CDNUnited States
AS15169Google LLC
935.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
9104.21.72.64Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.151.119Google · CDNUnited States
AS15169Google LLC
9142.251.154.119Google · CDNUnited States
AS15169Google LLC
738--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T178A3FA7175B6183A222F73CFE163634C5187EBF7D681ABFAB1F6001452B0C98369356A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:0W18AFypCteUpDp1gI7h7mAN1TAlamqUGoOScyuEt3awtNeDqdUljJeRh:XjAEt6IAAN1T5UGoOzyuEt3aaeDqWlMP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:104918:JAVTAhXYCSIARARkEZCAohzgACqnIxXTQBtCIDBAaIEiQAiRDAeIgVoK5Z7KGRAcBJFANAQRBQwCcCQotBNEAIhYyOCiEUG5

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffb9ab8f8e8e8f8
Perceptual Hash:cda4b2abc653315a
Difference Hash:c7367472625b5830
Wavelet Hash:fff31038f808a8f8
Color Hash:#c387c5

Scan History

Scan history not available

Unable to load historical scan data