Security Scan Report: chaloupecka.cz

Submitted: Completed: publiccompleted
This website contacted 6 IPs in 3 countries across 6 domains to perform 22 HTTP transactions. The main domain is chaloupecka.cz and was registered 18 years ago.

Submitted URL: https://chaloupecka.cz

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Legitimate 18-year-old dermatology site has been compromised and now injects a ClickFix kit: a fake Cloudflare verification overlay drives visitors to paste attacker commands into Windows Terminal, with payload hosts resolved via a Polygon contract (EtherHiding). Do not follow its instructions.

Risk Factors (5)
Compromised WordPress site serving an injected ClickFix terminal-paste kit
Obfuscated loader using blockchain EtherHiding for stage retrieval
Fake Cloudflare-style verification overlay instructing users to run pasted commands in Terminal
Untrusted third-party script host cloud-browse.codes, not ranked and flagged by three threat feeds
Critical network IDS alert for malware EtherHiding exfiltration
Domain age information unavailable

Details

Page Title

Chaloupecká | MUDr. Chaloupecká

Scan Type

public

Domain Name Analysis

You're looking at domain 'chaloupecka.cz' on the Czech country-code top-level domain (.cz) and has no subdomain. Its registrable label 'chaloupecka' stretches across 11 characters split between 5 vowels and 6 consonants. It segments into four words: cha, lou, peck, a. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://chaloupecka.cz

Page Load Overview

1.05s
Total Load Time
495 KB
Total Size

Language Analysis

Primary Language

🇨🇿Czech
Code: cs
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:cs-CZ
Text Length:2,577 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
778.44.192.254Prague, Prague, Czech Republic
AS16019Vodafone Czech Republic a.s.
374.125.29.95Google · CDNUnited States
AS15169Google LLC
3172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3185.102.21.125Czech Republic
AS8648dogado GmbH
3178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
3142.251.20.94Google · CDNUnited States
AS15169Google LLC
226--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15223E7374548A13E60634ED6A461320F30ECC1EBC6120AACF7E17EF5AE9FDC255A5768

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:QX6LrHO+o163PfgK+RgselcMl1tmlOSbe3oKOoD3oKOD3oKOHx:QXwO+o163PfgK+q/lcAjgmx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:49829:JK5JWJ1AIDQxERSAGsIUsODcEClNpTEAI4AArqDjKRGHwGCoShQfAKAiBDBFoIIIoGCTQIGJEAoIEJAwgAAswgI4ED2EKUDB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfcfc3c3ffffffff
Perceptual Hash:b03193c7c6ccccce
Difference Hash:1818163600000008
Wavelet Hash:fcc4c0c03c3cff00
Color Hash:#e06c8d

Other Hashes

Crop Resistant:1818163600000008

Scan History

Scan history not available

Unable to load historical scan data