Security Scan Report: e-labelqr.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 5 domains to perform 118 HTTP transactions. The main domain is e-labelqr.com and was registered 2 years 9 months ago.

Submitted URL: https://e-labelqr.com

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Legitimate-looking EU wine e-labeling site showing malware-loader indicators: EtherHiding malware IDS alerts, a Base-chain RPC connection, and a primary-domain malware loader report — likely compromised and serving a hidden loader to visitors.

Risk Factors (4)
Malware loader indicator on the primary domain
EtherHiding exfiltration IDS alerts (ET MALWARE, CRITICAL)
Blockchain RPC (mainnet.base.org) connection from a non-crypto wine-labeling site
Possible site compromise serving a loader to visitors
Domain age information unavailable

Details

Page Title

E-label QR - e-label QR | Etiquetado QR para botellas de vino

Scan Type

public

Domain Name Analysis

You're looking at domain 'e-labelqr.com' on the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'e-labelqr' spans 9 characters holding three vowels versus 5 consonants, along with 1 hyphen. Breaking it apart gives 3 words: e, label, qr. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://e-labelqr.com

Page Load Overview

25.46s
Total Load Time
3.9 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:7,233 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service79% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
79%
documentation technical
69%
blog personal website
62%
e-commerce shopping
44%
adult content
43%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2291.192.110.61Seville, Andalusia, Spain
AS39020Comvive Servidores S.L.
16104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16142.250.154.97Google · CDNUnited States
AS15169Google LLC
16151.101.1.229Fastly · CDNUnited States
AS54113Fastly, Inc.
16142.251.14.97Google · CDNUnited States
AS15169Google LLC
16172.64.147.103Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16216.239.34.36Google · CDNUnited States
AS15169Google LLC
1187--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E7E31EA17C53802DB63F216F9613E19C25288CCED43EB6D7F426511BF4BAE6633E0A15

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:co+SApqzY3MAm0AFas2znoDAv/OAZZ1rIz3WRjqloR0ZO:cnsY3MAm0AFas2znoDAv/OAZZ1rIz3Wp

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:146757:WAgCpQRTmOCCqCI1ogEBkBHhCFQgISAoR+CIqxmIsgNEMojOxUoTCiCSYdsAUHWBwPAkARIKkKAAJEoMJiCABVFFbgSCKgEj

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f8fcf8f0f0f0e0f8
Perceptual Hash:e9696969a949a969
Difference Hash:2200000000000000
Wavelet Hash:f0f8f0f0f0e0e0f8
Color Hash:#784f3a

Other Hashes

Crop Resistant:2200000000000000

Scan History

Scan history not available

Unable to load historical scan data