Is franzredheadline.com safe?
http://franzredheadline.com/
franzredheadline.com redirects to Google but flagged phishing by 17 AV engines
franzredheadline.com (created Jan 2025) immediately redirects visitors to google.com. The domain itself is detected as malicious/phishing by 17 of 92 VirusTotal engines including BitDefender, Kaspersky, ESET and others. Screenshot and navigation logs confirm the cross-site redirect behavior.
Read the full analysisLoading saved screenshot
Preparing the saved page preview.
01 · Investigation Brief
Investigation Brief
franzredheadline.com (created Jan 2025) immediately redirects visitors to google.com. The domain itself is detected as malicious/phishing by 17 of 92 VirusTotal engines including BitDefender, Kaspersky, ESET and others. Screenshot and navigation logs confirm the cross-site redirect behavior.
What the site appears to do
The captured page at franzredheadline.com performs a 301 redirect to google.com, ultimately loading the standard Google homepage with search bar, AI tools, and footer links. No content from the original domain is displayed.
Decisive evidence
VirusTotal reports 17 malicious detections (alphaMountain.ai, BitDefender, Kaspersky, ESET, Fortinet, Sophos, Webroot and others) classifying the domain as phishing or malware. Multiple independent sandbox reports (ANY.RUN, Gridinsoft, Joe Sandbox) confirm phishing tags and credential-theft patterns.
The observed cross-site redirect from franzredheadline.com to google.com is documented in navigation logs and page content analysis.
Practical user impact
Visiting the domain carries high risk of phishing or malware exposure even though the final destination is legitimate Google. Users should never enter credentials or download files from such redirects. Bookmark google.com directly instead.
Why the score is 15
15 independent antivirus familyies reported an adverse result. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
Fresh result
17 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 17
- Suspicious
- 0
- Total
- 92
| Engine | Finding |
|---|---|
| ADMINUSLabsMalicious | malicious |
| alphaMountain.aiMalicious | phishing |
| BitDefenderMalicious | phishing |
| Chong Lua DaoMalicious | malicious |
| CyRadarMalicious | phishing |
| ESETMalicious | phishing |
| FortinetMalicious | phishing |
| G-DataMalicious | phishing |
| GridinsoftMalicious | phishing |
| KasperskyMalicious | phishing |
| LionicMalicious | phishing |
| LumuMalicious | malware |
| RisingMalicious | phishing |
| SOCRadarMalicious | phishing |
| SophosMalicious | malware |
| VIPREMalicious | malware |
| WebrootMalicious | malicious |
All 92 engine results
- ADMINUSLabs - malicious - Malicious
- alphaMountain.ai - phishing - Malicious
- BitDefender - phishing - Malicious
- Chong Lua Dao - malicious - Malicious
- CyRadar - phishing - Malicious
- ESET - phishing - Malicious
- Fortinet - phishing - Malicious
- G-Data - phishing - Malicious
- Gridinsoft - phishing - Malicious
- Kaspersky - phishing - Malicious
- Lionic - phishing - Malicious
- Lumu - malware - Malicious
- Rising - phishing - Malicious
- SOCRadar - phishing - Malicious
- Sophos - malware - Malicious
- VIPRE - malware - Malicious
- Webroot - malicious - Malicious
- 0xSI_f33d - unrated - Clean
- Abusix - clean - Clean
- Acronis - clean - Clean
- AILabs (MONITORAPP) - clean - Clean
- AlienVault - clean - Clean
- AlphaSOC - unrated - Clean
- Antiy-AVL - clean - Clean
- ArcSight Threat Intelligence - unrated - Clean
- AutoShun - unrated - Clean
- Bfore.Ai PreCrime - unrated - Clean
- Bkav - unrated - Clean
- BlockList - clean - Clean
- Blueliv - clean - Clean
- Certego - clean - Clean
- ChainPatrol - unrated - Clean
- CINS Army - clean - Clean
- Cluster25 - unrated - Clean
- CRDF - clean - Clean
- Criminal IP - unrated - Clean
- CSIS Security Group - unrated - Clean
- CTX AI - clean - Clean
- Cyan - unrated - Clean
- Cyble - clean - Clean
- desenmascara.me - clean - Clean
- DNS8 - unrated - Clean
- Dr.Web - clean - Clean
- EmergingThreats - clean - Clean
- Emsisoft - clean - Clean
- Ermes - unrated - Clean
- ESTsecurity - clean - Clean
- Forcepoint ThreatSeeker - clean - Clean
- Fortra - unrated - Clean
- GCP Abuse Intelligence - unrated - Clean
- Google Safe Browsing - clean - Clean
- GreenSnow - clean - Clean
- GreyNoise - unrated - Clean
- Guardpot - unrated - Clean
- Heimdal Security - clean - Clean
- Hunt.io Intelligence - unrated - Clean
- IPsum - clean - Clean
- Juniper Networks - clean - Clean
- K7AntiVirus - unrated - Clean
- LevelBlue - clean - Clean
- Malwared - clean - Clean
- MalwarePatrol - clean - Clean
- MalwareURL - unrated - Clean
- Mimecast - unrated - Clean
- Netcraft - unrated - Clean
- OpenPhish - clean - Clean
- PhishFort - unrated - Clean
- Phishing Database - clean - Clean
- Phishtank - clean - Clean
- PREBYTES - clean - Clean
- PrecisionSec - unrated - Clean
- Quick Heal - clean - Clean
- Quttera - clean - Clean
- SafeToOpen - unrated - Clean
- Sangfor - clean - Clean
- Sansec eComscan - unrated - Clean
- Scantitan - clean - Clean
- SCUMWARE.org - clean - Clean
- Seclookup - clean - Clean
- Snort IP sample list - unrated - Clean
- StopForumSpam - clean - Clean
- Sucuri SiteCheck - clean - Clean
- ThreatHive - clean - Clean
- URLhaus - clean - Clean
- URLQuery - unrated - Clean
- Viettel Threat Intelligence - clean - Clean
- ViriBack - clean - Clean
- VX Vault - clean - Clean
- Xcitium Verdict Cloud - unrated - Clean
- Yandex Safebrowsing - clean - Clean
- ZeroCERT - clean - Clean
- ZeroFox - unrated - Clean
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Captured during this scan in a safe sandbox. Opening this report does not revisit the site. Marker positions are approximate. See full visual analysis →
No scam visual patterns were identified
Standard Google homepage with logo, search bar, and footer links
What the captured page showed
1 observation- 01
Standard Google homepage with logo, search bar, and footer links
03 · Investigation Story
Investigation story
- 1
What the site claims
Google
- 2
What we observed
Saved browser evidence recorded forced redirects, cross domain landing.
- 3
What independent research found
2 external findings were saved and compared with the page evidence.
- 4
What remains unverified
1 of the five core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Phishing & Impersonation
Also observed: Malware & Deceptive Downloads
Service and business model
Unknown
Unknown
Observed behavior
Evidence behind this classification
- 0115 independent antivirus familyies reported an adverse result.
- 02The page redirected the browser to an unrelated external domain.
What this means for you
You were probably about to log in or type personal details here.
Anything you enter — username, password, card number, one-time code — goes straight to criminals, who use it to take over your real accounts and drain them.
How this scam works
The trap, step by step
They clone a real login page (a bank, email provider, PayPal, a courier) pixel-for-pixel.
You're driven here by an email, text, or ad with an urgent reason to “verify”, “unlock”, or “confirm” your account.
You type your username and password — which flow straight to the scammers instead of the real company.
They log into your real account, change the password, and drain it or sell the access.
Recognising the pattern is the best defence — if a site follows these steps, close it and don't enter anything.
Web research findings
Independent findings for franzredheadline.com, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
Domain Timeline
- Jan 13, 2025Domain registered
First appeared in WHOIS records — 1.5 years old today.
- Jul 31, 2026Saved security review — Flagged as dangerous
The completed checks from this saved scan are detailed above.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No direct contact email found on the captured page.
Domain & Encryption
Redirect Chain
- 1301http://franzredheadline.com/
- 2301https://google.com/cross-domain
- 3200https://www.google.com/cross-domain
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
The conclusion is supported by the evidence saved with this report.
Technical threat
Malware, phishing, credential theft and hostile infrastructure.
Additional evidence review
Operator / customer risk
Complaints, withdrawals, business conduct and commercial traps.
Additional evidence review
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 17 of 92 engines flagged | Completed | Adverse | fresh · Jul 31, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | Not available |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | Not available |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | Not available |
| Independent research | 2 independent findings were saved | Completed | Adverse | Not available |
- Page content
- Result: Page fetched · HTTP 200
- Completed
- No adverse finding
- Visual evidence
- Result: 1 visible observation saved with the page capture
- Completed
- No adverse finding
- Independent research
- Result: 2 independent findings were saved
- Completed
- Adverse
07 · Community
Community
08 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.

0 community contributions
Share what happened, what the site requested, and what others should watch for.
Community reviews never change the scanner verdict.