Security Scan Report: sophiezirafa.cz

Redirected to:
https://www.sophiezirafa.cz/
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 6 domains to perform 42 HTTP transactions. The main domain is sophiezirafa.cz and was registered 16 years ago.

Submitted URL: https://sophiezirafa.cz

Effective URL:
https://www.sophiezirafa.cz/
Redirected

AI Security Verdict

High Risk

Confidence: 88%

7
Risk Score

Compromised toy-brand site serving the ClearFake blockchain loader via an obfuscated script hiding a malware host, plus injected casino spam; no credential forms, but the malware chain makes it unsafe.

Risk Factors (5)
Known ClearFake Polygon/EtherHiding contract loader injected into the page
Obfuscated script concealing a malware-distribution host (libraryadvances.com)
Third-party malware threat-intel report against the page's own domain
Injected casino/betting spam content indicating site compromise
Likely compromised WordPress site serving a ClickFix-style malware chain
Domain age information unavailable

Details

Page Title

Žirafa Sofie

Scan Type

public

Domain Name Analysis

You're looking at domain 'sophiezirafa.cz' on the Czech country-code top-level domain (.cz). The registrable portion 'sophiezirafa' spans 12 characters with 6 vowels and six consonants. Tokenizing the label suggests three words: sophie, zira, fa. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sophiezirafa.cz

Page Load Overview

3.40s
Total Load Time
828 KB
Total Size

Language Analysis

Primary Language

🇨🇿Czech
Code: cs
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:cs
Text Length:3,105 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical67% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
67%
education learning
67%
news/blog
20%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10194.108.42.74Zlín, Zlín, Czech Republic
AS13036T-Mobile Czech Republic a.s.
8142.251.20.95Google · CDNUnited States
AS15169Google LLC
8104.21.65.137Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8142.251.14.94Google · CDNUnited States
AS15169Google LLC
8172.67.181.66Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
425--

Detected Technologies10

WordPressv6.9.4
100%
JQueryv3.7.1
100%
60%
50%
Diviv3.26.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18893087A87BD7839311B4BD8FD31F71897B98433EF425991B2FAA0589BC09E1067211E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:o+ypWAjLMGb/IYQlWOM/7tVrO5u/4pcoxCmKTY0sGry3V:oXsPYQlNM/5VuE4pLxVKk0Pry3V

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:89885:qJsw2gFqiIAN0DKJBMEg1IROaUQAISAIeJAVgNSAhBzBAYgUCATIBAhGLsqAAUlYRiEzegCBUFE3YYQD0JADGxIlEhiBiOgB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefefeffffffffff
Perceptual Hash:d55555aaaaaa8c55
Difference Hash:0000000808000000
Wavelet Hash:3e3e3e26263e3232
Color Hash:#97bf40

Other Hashes

Crop Resistant:0000000808000000

Scan History

Scan history not available

Unable to load historical scan data