Security Scan: Graine Ile de France

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d7dc2f71-5625-4b59-abd6-4c151336d968 Domain and IP registration (RDAP)/api/v1/rdap/d7dc2f71-5625-4b59-abd6-4c151336d968How often this domain was scanned/api/v1/domain/stats/graine-idf.org Scan history for this domain/api/v1/domain/history/graine-idf.org?limit=15

This website contacted 2 IPs in 2 countries across 2 domains to perform 53 HTTP transactions. The main domain is graine-idf.org and was registered 27 years ago.

Submitted URL: https://graine-idf.org

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Legitimate French environmental-education nonprofit whose site appears compromised: analyst-vetted IClickFix/EtherHiding loader and obfuscated blockchain-fetched stage are injected into the page. No credential forms; risk is drive-by malware.

Risk Factors (5)

Known malicious ClickFix/EtherHiding injection present in page code (compromised site pattern)

Obfuscated JavaScript that retrieves a second stage from a smart contract on the Ethereum Sepolia test network

Obfuscated references to reputation-flagged RPC/tenderly hosts, visible only after decoding

Anti-analysis technique (right-click blocking) combined with obfuscated loaders

Threat-intel match on the primary domain (single-source, unverified)

Domain age information unavailable

Details

Page Title

Graine Ile de France

Scan Type

public

Favicon Hash

MMH3: 347779025

MD5: 3f77b99df664910f30fdad48c70a6e63

Domain Name Analysis

Domain 'graine-idf.org' uses the non-profit oriented generic top-level domain (.org) with no subdomain. The second-level label 'graine-idf' is 10 characters long holding four vowels versus five consonants; bonus characters include one hyphen. It segments into 3 words: grain, e, idf. Median word length is 3 characters. No strong language cues emerged from the frequency lists.