Security Scan Report: sterrevdberg.com

Redirected to:
https://www.sterrevdberg.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 5 domains to perform 18 HTTP transactions. The main domain is sterrevdberg.com and was registered 1 year 7 months ago.

Submitted URL: https://sterrevdberg.com

Effective URL:
https://www.sterrevdberg.com/
Redirected

AI Security Verdict

High Risk

Confidence: 92%

7
Risk Score

Compromised portfolio site: ClearFake blockchain loader injected in the HTML plus a cross-origin beacon to a .cc domain. No forms, but the page serves malware to real visitors — avoid.

Risk Factors (5)
Analyst-vetted ClearFake malicious kit injected into the page's HTML
Cross-origin beacon/POST to suspicious .cc domain (ferma.seo-solutions.eu.cc) with bot-detection parameters
Threat-intel malware-loader reports on the primary domain
JavaScript obfuscation heuristics and .cc DNS alert in network IDS
Site appears to be a compromised legitimate portfolio serving a hidden loader to non-crawler visitors
Domain age information unavailable

Details

Page Title

Sterre van den Berg – Graphic Designer

Scan Type

public

Domain Name Analysis

You're looking at domain 'sterrevdberg.com' on the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'sterrevdberg' stretches across 12 characters holding 3 vowels versus 9 consonants. Splitting it apart reveals three words: ster, revd, berg. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

No image found No posts You have no posts in your blog. Start adding some posts in your dashboard.

Page Load Overview

3.35s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:137 chars
Detector Agreement:50%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
631.214.178.84Ibiza Town, Balearic Islands, Spain
AS57910Soluciones Corporativas IP, SL
3142.251.20.95Google · CDNUnited States
AS15169Google LLC
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
3172.67.209.248Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.21.58.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
185--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C5334A31A35C187AE72F4798ACB5B70CE8B9E701DE46C17AF0BB70549494EF501A6B0D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:vq/yNWOtA/7xaYypnGxFFIi8PSNh5hRnx8:jNNtA/9a5pmFIi8PSNh5hZx8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:53939:UyoIESMTg24F0JgZ1IESf0ARgL8QggOFIAEnuXxwAwIjFQSKhCbBFJKSXJChYAZDFDIBFQSAAKZEEAZCJAZdS6AhJq0BJX7A

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:2767ffffffffffff
Perceptual Hash:a72727070d8d8ddc
Difference Hash:cc8c000000000000
Wavelet Hash:26c2fefe0e0e0e0e
Color Hash:N/A

Other Hashes

Crop Resistant:cc8c000000000000

Scan History

Scan history not available

Unable to load historical scan data