ScanMalware.com

Security Scan Report: leatherliftoff.co

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/12bf6d24-8539-4199-8371-724fe9d11590Domain and IP registration (RDAP)/api/v1/rdap/12bf6d24-8539-4199-8371-724fe9d11590How often this domain was scanned/api/v1/domain/stats/leatherliftoff.coScan history for this domain/api/v1/domain/history/leatherliftoff.co?limit=15
This website contacted 8 IPs in 1 country across 8 domains to perform 142 HTTP transactions. The main domain is leatherliftoff.co and was registered 3 years 2 months ago.

Submitted URL: https://leatherliftoff.co

AI Security Verdict

Low Risk

Confidence: 68%

3
Risk Score

Legitimate-looking 3-year-old leather/sportswear shop whose page content is laced with injected gambling SEO-spam links and an outbound link to a malware-flagged domain — indicative of a compromised site. Do not log in or purchase.

Risk Factors (3)
Injected gambling/link-farm anchor text and dozens of unrelated spam domains embedded in the page content (site compromise / SEO spam injection)
Outbound link to cafe-and-more.ch, reported as clearfake (malware) — single-source, unverified
WordPress/WooCommerce footer link-injection pattern typical of an unpatched or compromised install
Safety Factors (6)
Domain registered 2023-08-20 (1178 days old, well-established)
Self-branding detected: title/meta match the domain, no impersonation of another entity
Login form posts same-origin to https://leatherliftoff.co/ with a WooCommerce nonce — appears to be the site's own account login, not credential phishing
No payment fields, no disguised password fields, no cross-origin credential exfiltration
Third-party script hosts are top-1M ranked (WordPress/Jetpack, Cloudflare cdnjs, Google Fonts) and no JavaScript behavioral red flags
No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no hunting rule / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 7 to 3
Domain age information unavailable

Details

Page Title

Leather Lift off – Sports Wears | Leather Garments | Casual Wears | Fitness Wears | Motorbike Gears

Scan Type

public

Domain Name Analysis

The domain 'leatherliftoff.co' uses the Colombian country-code top-level domain (.co). Its registrable label 'leatherliftoff' stretches across 14 characters split between five vowels and nine consonants. It segments into 2 words: leather, liftoff. Median word length is 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

UR PHONE NUMBER 8 3 LINKEDIN ABOUTUS PRODUCTS. CONTACT US NEW COLLECTIONS LEATHER WEARS Premium quality leather wears range < VIEW RANGE Need Help? Chat We use cookies to improve your experianc...

Page Load Overview

4.18s
Total Load Time
2.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:21,594 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping52% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
52%
social_media
25%
e-commerce
20%
news/blog
20%

Detected Features

Login Form
Articles
Products

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23185.146.167.193United States
AS4825420i Limited
17192.0.77.37San Francisco, California, United States
AS2635Automattic, Inc
17104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17142.251.14.95Google · CDNUnited States
AS15169Google LLC
17192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
17192.0.77.2San Francisco, California, United States
AS2635Automattic, Inc
17142.251.14.94Google · CDNUnited States
AS15169Google LLC
17104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1428--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T187B493BBD07E083F02BB22D651027B9CF493DB6396C14BE5F19B4528AF82AE4752315D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:A5l/+O/F+k6PkWkx5kIxkjK5x82PV0of5t4/hnJDl0kgGk5MV6Oblk9h4kQ5hCk8:zPb6/22mOu7l0ijVSJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:529222:0LIADQCAACxIAQhSjMTISoAYUTISwlR4gyCIQbARVkAtWJREoERSACgChYAkjFRpQCyIFi2012BlIhgQAAEYgAIKoAApvZWA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0707030e1d1f09
Perceptual Hash:98e7ecd8c3c8529c
Difference Hash:4a2e8ecab8b9b3b3
Wavelet Hash:ff07070f0e1d1d19
Color Hash:32c00018000

Other Hashes

Crop Resistant:4a2e8ecab8b9b3b3,460ecadab8b1b3b3,d99dbd11899737b6

Scan History

Scan history not available

Unable to load historical scan data