Security Report: vvs24.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0c8a698d-3e24-4ec8-9093-e43279aa9a6f Domain and IP registration (RDAP)/api/v1/rdap/0c8a698d-3e24-4ec8-9093-e43279aa9a6fHow often this domain was scanned/api/v1/domain/stats/vvs24.com Scan history for this domain/api/v1/domain/history/vvs24.com?limit=15

This website contacted 26 IPs in 2 countries across 25 domains to perform 158 HTTP transactions. The main domain is vvs24.com and was registered 21 years ago.

Submitted URL: https://vvs24.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate Tromsø plumbing company site that has been compromised and now serves a ClickFix/EtherHiding malware loader (Sepolia/Tenderly blockchain second stage); critical IDS malware alerts and analyst-vetted IClickFix hunting-rule match. Avoid visiting until cleaned.

Risk Factors (4)

Compromised site injecting an obfuscated ClickFix/EtherHiding loader (blockchain-hosted second stage)

Critical network IDS malware alerts for ClickFix domain and EtherHiding exfiltration

Malware-typed threat-intel match on the scanned primary domain

Hidden RPC/threat-feed hosts only visible after deobfuscating inline script

Domain age information unavailable

Details

Page Title

Rørlegger i Tromsø - 24/7 rørleggervakt og gratis befaring - VVS24

Scan Type

public

Favicon Hash

MMH3: 1208956318

MD5: 3203d8152104d0803d411753e063575e

Domain Name Analysis

Domain 'vvs24.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The core label 'vvs24' covers 5 characters split between zero vowels and 3 consonants, plus two digits. It segments into 3 words: v, vs, 24. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

| (127,776.90 200 Jf postevvs2d com Din lokale Rørlegger og VVS Spesial) | WS24! HJEM TJENESTER JETS ANSATTE KONTAKT OSS UFORPLIKTENDE TILBUD BÆREKRAFT JOBB HOS OSS RA 5 VV S2Aterfdinjtotalleyerand...

Page Load Overview

4.26s

Total Load Time

5.8 MB

Total Size

Language Analysis

Primary Language

🇳🇴Norwegian

Code: no

Confidence:51%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:nb-NO

Text Length:13,296 chars

Detector Agreement:100%

Language mismatch: Declared as nb-NO but detected as no

Website Classification

Primary Category

corporate50% confidence

Type: spa

Method: structural

All Detected Categories

corporate

50%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	104.37.38.91	Oslo, Oslo, Norway	AS51468One.com A/S
6	172.66.174.217Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.250.154.95Google · CDN	United States	AS15169Google LLC
6	3.171.214.99Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	142.251.14.94Google · CDN	United States	AS15169Google LLC
6	142.251.20.97Google · CDN	United States	AS15169Google LLC
6	104.20.33.75Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.251.156.119Google · CDN	United States	AS15169Google LLC
6	142.251.20.148Google · CDN	United States	AS15169Google LLC
6	104.26.4.247Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
158	26	-	-