Security Report: adelheid-gloeser.fr - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c2888321-c791-4028-806e-940a3a400bc4 Domain and IP registration (RDAP)/api/v1/rdap/c2888321-c791-4028-806e-940a3a400bc4How often this domain was scanned/api/v1/domain/stats/adelheid-gloeser.fr Scan history for this domain/api/v1/domain/history/adelheid-gloeser.fr?limit=15

This website contacted 7 IPs in 2 countries across 6 domains to perform 48 HTTP transactions. The main domain is adelheid-gloeser.fr and was registered 3 years 8 months ago.

Submitted URL: https://adelheid-gloeser.fr

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate doctor's site compromised with a ClickFix kit: a fake Cloudflare 'Human Verification' overlay and a blockchain-backed loader push visitors to paste Terminal commands, infecting them with malware.

Risk Factors (5)

Analyst-vetted ClickFix Win+X / Terminal 'Human Verification' overlay kit injected into the page (CRITICAL phishing)

Blockchain-backed loader (EtherHiding) resolving its payload host from a Polygon smart contract

Obfuscated third-party script from cloud-browse.codes, reported as malicious by 3 independent threat feeds

Two CRITICAL network IDS alerts for malware EtherHiding exfiltration

Fake Cloudflare-style verification overlay impersonating Cloudflare branding to trick visitors into executing code

Domain age information unavailable

Details

Page Title

Accueil - Drgloeser

Scan Type

public

Favicon Hash

MMH3: -18040723

MD5: d575910bda7586f8a028a0594a90f285

Domain Name Analysis

You're looking at domain 'adelheid-gloeser.fr' on the French country-code top-level domain (.fr) and has no subdomain. Its registrable label 'adelheid-gloeser' stretches across 16 characters with seven vowels and eight consonants, along with one hyphen. It segments into 4 words: adelheid, g, loe, ser. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.80s

Total Load Time

3.9 MB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR

Text Length:1,789 chars

Detector Agreement:50%

Website Classification

Primary Category

technology software45% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

45%

healthcare medical

37%

corporate

35%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	217.160.0.210	Germany	AS8560IONOS SE
6	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.251.110.95Google · CDN	United States	AS15169Google LLC
6	142.251.13.94Google · CDN	United States	AS15169Google LLC
6	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
6	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
48	7	-	-