Security Report: sprzataniegrobow.krakow.pl - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1021c039-376c-461b-833d-1f74918ca617 Domain and IP registration (RDAP)/api/v1/rdap/1021c039-376c-461b-833d-1f74918ca617 Certificate Transparency/api/v1/ct/sprzataniegrobow.krakow.pl How often this domain was scanned/api/v1/domain/stats/sprzataniegrobow.krakow.pl Scan history for this domain/api/v1/domain/history/sprzataniegrobow.krakow.pl?limit=15

This website contacted 19 IPs in 2 countries across 18 domains to perform 64 HTTP transactions. The main domain is sprzataniegrobow.krakow.pl and was registered 6 years ago.

Submitted URL: https://sprzataniegrobow.krakow.pl

Effective URL:

https://www.sprzataniegrobow.krakow.pl/

Redirected

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Legitimate-looking, aged Kraków grave-cleaning site that appears compromised: it loads multi-source iclickfix malware (xaz2.com) and triggers a CRITICAL EtherHiding malware-exfiltration IDS alert. Avoid until cleaned.

Risk Factors

EtherHiding malware exfiltration signature on live page traffic

Third-party resource xaz2.com corroborated as iclickfix malware by two independent feeds

Blockchain RPC (tenderly.co) contacted during page load — anomalous for a grave-cleaning site

Suspicious 'click the image to gain financial freedom' bait content injected among service descriptions

Primary domain reported as a malicious host by threat-intel feeds

Domain age information unavailable

Details

Page Title

Sprzątanie grobów w Krakowie - Rakowice, Podgórski, Grębałów, Batowice

Scan Type

public

Favicon Hash

MMH3: -629770376

MD5: a5e1d45fe46ce046213f97cc68bf02c1

Domain Name Analysis

The domain name 'sprzataniegrobow.krakow.pl' uses the Polish country-code top-level domain (.pl) with subdomain 'sprzataniegrobow'. The second-level label 'krakow' is 6 characters long containing two vowels alongside four consonants. Breaking it apart gives 1 word: krakow. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

11.82s

Total Load Time

2.3 MB

Total Size

Language Analysis

Primary Language

🇵🇱Polish

Code: pl

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pl-PL

Text Length:3,391 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service51% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

51%

corporate business

26%

corporate

25%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	195.78.67.29	Poland	AS41079Cyber_Folks S.A.
3	104.17.208.24Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.14.102Google · CDN	United States	AS15169Google LLC
3	142.251.152.119Google · CDN	United States	AS15169Google LLC
3	142.251.14.113Google · CDN	United States	AS15169Google LLC
3	142.251.157.119Google · CDN	United States	AS15169Google LLC
3	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
3	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.250.154.101Google · CDN	United States	AS15169Google LLC
3	142.250.154.139Google · CDN	United States	AS15169Google LLC
64	19	-	-