Security Scan Report: elzbietanki.pl

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 7 domains to perform 104 HTTP transactions. The main domain is elzbietanki.pl and was registered 23 years ago.

Submitted URL: https://elzbietanki.pl

AI Security Verdict

High Risk

Confidence: 95%

9
Risk Score

Legitimate Polish convent/kindergarten site that has been compromised with an IClickFix/EtherHiding ClickFix loader; critical malware IDS alerts and a vetted malicious kit make it unsafe to visit.

Risk Factors (4)
Known malicious kit (IClickFix / EtherHiding) injected into the page
Multiple CRITICAL network IDS malware alerts and EtherHiding exfiltration signature
Blockchain-based (Ethereum Sepolia) loader hidden in obfuscated JavaScript
Threat-feed C2/loader hosts only visible after deobfuscation
Domain age information unavailable

Details

Page Title

Siostry Elżbietanki w Zielonej Górze

Scan Type

public

Domain Name Analysis

The domain 'elzbietanki.pl' uses the Polish country-code top-level domain (.pl) and has no subdomain. Count 11 characters in 'elzbietanki' split between five vowels and six consonants. Breaking it apart gives four words: elz, bie, tank, i. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://elzbietanki.pl

Page Load Overview

7.40s
Total Load Time
4.0 MB
Total Size

Language Analysis

Primary Language

🇵🇱Polish
Code: pl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pl-PL
Text Length:4,108 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical59% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
59%
entertainment media
51%
education learning
45%
government public service
37%
news/blog
20%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2077.55.252.105Poland
AS15967Nazwa.pl Sp.z.o.o.
1474.125.29.95Google · CDNUnited States
AS15169Google LLC
14172.67.128.234Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14142.251.13.94Google · CDNUnited States
AS15169Google LLC
14192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
1435.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
14188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1047--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F0540A76A46DA93FD147C35DCAD65B1C32AE4267F641C2ECB3B94F1E0A20DC2096D722

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:FRd0//8CY4zEnYT+ey8CTjhuhtSn1AbFAhL6Y4II:FRdBbTjh+KG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:305671:GFQ0tGAyYCAM0BIJFK6EEACFQEAHIThRoJYqIAAgkJagPhg4BAQAAYiTwNML5gWqEDGIAHcRdTFoYESDZMkAWLClEihcASGQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffef8181a0e08100
Perceptual Hash:eab195cb86e460a7
Difference Hash:c01b0f2969412337
Wavelet Hash:ffefc1e1a1e1a100
Color Hash:#c387c5

Scan History

Scan history not available

Unable to load historical scan data