ScanMalware.com

Security Scan Report: knitperustore.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2fda0e6d-11f6-4d73-bd77-e7fb15b7c5c7Domain and IP registration (RDAP)/api/v1/rdap/2fda0e6d-11f6-4d73-bd77-e7fb15b7c5c7How often this domain was scanned/api/v1/domain/stats/knitperustore.comScan history for this domain/api/v1/domain/history/knitperustore.com?limit=15
This website contacted 10 IPs in 2 countries across 7 domains to perform 92 HTTP transactions. The main domain is knitperustore.com and was registered 10 months ago.

Submitted URL: https://knitperustore.com

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Legitimate-looking Peruvian knitwear store whose page loads malware-linked resources (xaz2.com iclickfix) and uses blockchain RPC, triggering a CRITICAL EtherHiding exfiltration IDS alert — likely a compromised storefront serving malicious scripts.

Risk Factors (4)
CRITICAL IDS malware alert (ET MALWARE EtherHiding Exfil M2)
Malware/adware domain xaz2.com (iclickfix) loaded as a page resource
Blockchain RPC (tenderly.co) usage consistent with EtherHiding C2 retrieval
Primary domain flagged as RAT malware (single-source, unverified)
Domain age information unavailable

Details

Page Title

Knit Peru Store – Store Perú

Scan Type

public

Domain Name Analysis

The domain name 'knitperustore.com' uses the commercial generic top-level domain (.com) without a subdomain. Count 13 characters in 'knitperustore' holding 5 vowels versus eight consonants. Splitting it apart reveals three words: knit, peru, store. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

KNIT @nees7iese0 a sio00 Inicio Nosotros Catalogo Curso online Blog Contacto. Recién Estampados Nueva Coleccién

Page Load Overview

85.22s
Total Load Time
185 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:2,785 chars
Detector Agreement:75%

Website Classification

Primary Category

blog personal website98% confidence
Type: spa
Method: ml+structural

All Detected Categories

blog personal website
98%
education learning
88%
finance banking
76%
government public service
75%
healthcare medical
65%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11167.86.75.202Nuremberg, Bavaria, Germany
AS51167Contabo GmbH
965.8.131.17Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
913.226.244.113Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
9142.251.110.95Google · CDNUnited States
AS15169Google LLC
935.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
9142.250.154.95Google · CDNUnited States
AS15169Google LLC
965.8.131.4Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
913.226.244.78Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
9188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9192.178.183.94Google · CDNUnited States
AS15169Google LLC
9210--

Detected Technologies10

WordPressv7.0.2
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
HSTS
40%
WordPress Block Editor
30%
WooCommerce
20%
Slider Revolution
20%
Culqi
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C90318B1D0A511A63F5ED72CF3A2F21CA189E565DA0267EB70FD202C46D4AF710A3D1E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:/9i5Q62I/xE6x4g5bn/0d9Zdypzb5z17Kg/TU4jOT7n4nf97Na5zh+BuW:FiC7dVyp77Na5zIBuW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:40337:BTggZiwDIABCQCZqMtIiAzUQJSRBgAKgEgWgICSXmIjELAQdzEAYAgQRBIiloHIFAlwIBkBRWg5xAIhIBECAlIAI0CShRQZK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffe7
Perceptual Hash:f75d361c361a321a
Difference Hash:230020000000000c
Wavelet Hash:00803e3e32322222
Color Hash:N/A

Other Hashes

Crop Resistant:230020000000000c,01019194949c8305

Scan History

Scan history not available

Unable to load historical scan data