Security Scan Report: www.benu.cz

Site favicon
Submitted: Jun 19, 2026, 6:22:52 AMCompleted: Jun 19, 2026, 6:24:35 AMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is benu.cz and was registered NaN years ago.

Submitted URL: https://www.benu.cz

The Cisco Umbrella rank of the primary domain is #702,616 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 78%

5
Risk Score

The site hosts a login form and highly obfuscated JavaScript; while it appears to be the legitimate pharmacy brand, the combination warrants caution.

Risk Factors
Credential collection form (email + password)
High JavaScript obfuscation and dynamic code execution
Low domain ranking for a major brand
Safety Factors
Domain age > 17 years (well‑established)
No Indicators of Compromise matches
No malicious YARA patterns or IDS alerts
Form submits to same origin (no external exfiltration)
Self‑branding – not impersonating another entity
Established domain (6349 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

BENU.cz lékárna

Scan Type

public

Language

🇨🇿

Czech

(80% confidence)

Category

healthcare medical

(83%)

Domain Information

Domain 'www.benu.cz' uses the Czech country-code top-level domain (.cz); it also runs on subdomain 'www'. Count 4 characters in 'benu' holding 2 vowels versus 2 consonants. Word splitting yields 2 words: be, nu. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.benu.cz

Page Load Overview

3.52s
Total Load Time
119
HTTP Requests
9
Domains
3.5 MB
Total Size

Language Analysis

Primary Language

🇨🇿Czech
Code: cs
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:cs
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:cs
Text Length:25,668 chars
Detector Agreement:67%

Website Classification

Primary Category

healthcare medical83% confidence
Type: webapp
Method: ml+structural

All Detected Categories

healthcare medical
83%
social_media
25%
news/blog
20%
forum
20%

Detected Features

Login Form
Search
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6013.226.244.56United States
AS16509Amazon.com, Inc.
59172.66.150.8United States
AS13335Cloudflare, Inc.
1192--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C6B4ABB111D968178861539C72E69FB8C3BB8424C35959C2E2F2B7839EB7DC317E206D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:krbS2vXwD+DvFVp9r1FpRDhGqNpl6nCjiZq5g1Ee+t/y4mVYAmAy0MVuJZL2oKvo:krbCrD06nKaGVW1/9/x23e

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:502844:gCSpERgKgggrmCqgJDAxgpwIKoiY0ISgBMBQSEEwSSDrUR4DSoHEQPhDqBcsQJ9IFVj3c1UAAACBYzYgJkSRVBUVQEkAYgQ5

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffffff7ffff0000
Perceptual Hash:e6ee1993e224d8d4
Difference Hash:236226afce58c4c4
Wavelet Hash:ff00f3f1f6fe0000
Color Hash:#79d284

Scan History

Scan history not available

Unable to load historical scan data