ScanMalware.com

Security Scan Report: fantasyobchod.biz

Site favicon
Submitted: Aug 11, 2026, 4:29:10 AMCompleted: Aug 11, 2026, 4:30:59 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 3 countries across 4 domains to perform 2 HTTP transactions. The main domain is fantasyobchod.biz and was registered NaN years ago.

Submitted URL: https://fantasyobchod.biz/film-serial-merch

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

New domain impersonates the imago brand, harvests credentials via cross‑origin login forms – confirmed phishing scam.

Risk Factors
Newly registered domain (<7 days)
Brand impersonation of imago.cz
Credential login forms with password fields
Cross‑origin submission to a different brand domain
Multiple password fields across several forms
Domain age information unavailable

Details

Page Title

Filmový a seriálový merch, sběratelské a dárkové předměty | imago

Scan Type

public

Language

🇨🇿

Czech

(80% confidence)

Category

entertainment media

(85%)

Domain Information

You're looking at domain 'fantasyobchod.biz' on the business-focused generic top-level domain (.biz) with no subdomain. The second-level label 'fantasyobchod' is 13 characters long with four vowels and nine consonants. Splitting it apart reveals three words: fantasy, ob, chod. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fantasyobchod.biz/film-serial-merch

Page Load Overview

5.81s
Total Load Time
85
HTTP Requests
9
Domains
1.3 MB
Total Size

Language Analysis

Primary Language

🇨🇿Czech
Code: cs
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:cs
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:cs
Text Length:9,541 chars
Detector Agreement:80%

Website Classification

Primary Category

entertainment media85% confidence
Type: static
Method: ml+structural

All Detected Categories

entertainment media
85%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2289.221.217.63Czech Republic
AS197019WEDOS Internet, a.s.
21104.21.6.132Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2194.23.170.138Czech Republic
AS16276OVH SAS
2194.23.168.193France
AS16276OVH SAS
854--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14BB47F6DD3F28AAE057EB190DE34EB6C9AABA34322D46BF5743E814743405AC5C3349D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:/UWE7Vu1hP++RP/V0ZzVJAPNp5D8i7u1HkO48JiWI2pWSEqRz2Mx1AvBPqgKTS69:/UWE7Vu/5VazQtD8i6N0WQHe0Kkzw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:500983:iDQAACCsIigAFhgCo7f0GBCIs0KIhUIQgEk2kkM1wgFgOaISEUEyC1KFiCwp4gAgFoksETQDCh5gAARAWAV4CixwCEIoYXEg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff8f8ffffbc1e1fd
Perceptual Hash:ef959a63906463c9
Difference Hash:07581e2e570f2751
Wavelet Hash:e78f8f83eb81808d
Color Hash:#2dd259

Other Hashes

Crop Resistant:07581e2e570f2751,6198f8fcf8ecf1f8,fecb4b1b8b230f87

Scan History

Scan history not available

Unable to load historical scan data