Security Scan Report: mesh-stoffe.de

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 2 domains to perform 9 HTTP transactions. The main domain is mesh-stoffe.de.

Submitted URL: https://mesh-stoffe.de

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Compromised WordPress site carrying the analyst-vetted ClearFake Polygon contract loader and rival-kit cleanup script, plus injected casino SEO spam — a ClickFix malware delivery page. Avoid.

Risk Factors (6)
ClearFake Polygon/EtherHiding contract loader injected into the page (CRITICAL, roster-anchored)
ClearFake rival-kit cleanup script blocking navigation behind an overlay (HIGH, roster-anchored)
Known malicious kit family clearfake-polygon-loader-2026-10 identified
Primary domain reported as a malware loader by threat intelligence (single-source, unverified)
Compromised WordPress site serving injected gambling/casino SEO spam in multiple languages
Obfuscated/encoded inline JavaScript with a network sink plus unranked external script host
Domain age information unavailable

Details

Page Title

WordPress – Eine weitere WordPress-Website

Scan Type

public

Domain Name Analysis

The domain name 'mesh-stoffe.de' uses the German country-code top-level domain (.de) without a subdomain. Its registrable label 'mesh-stoffe' stretches across 11 characters containing three vowels alongside 7 consonants; it also includes one hyphen. Breaking it apart gives four words: mesh, s, to, ffe. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mesh-stoffe.de

Page Load Overview

2.82s
Total Load Time
87 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:3,569 chars
Detector Agreement:50%

Website Classification

Primary Category

gambling betting100% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
100%
entertainment media
98%
technology software
92%
adult content
92%
cryptocurrency blockchain
84%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
981.88.34.235Germany
AS8648dogado GmbH
91--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B9A3B66153B048F5797F837B5D64A3186A27EA02CD0577D5E0F7E29060CDEA60AE3B0B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:H0NlAA91GrcmRiBmgT0cTrnbO27kAMLZ3bwemlUVugRmcuX8bzbRDzp6PyAZfg:TA94rcmoTknLZ3bwemlUVugRmcuX8bzt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:106129:AOFMRBAgCNcSxBgsIgIjJUEsEbIy6AUc0IZDYqTEAFMhgBQCtmgQwACUAQwkSIhJoTexBAWvpAECCKkgQVSOJYowUEIARkqC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000ffffffffff
Perceptual Hash:ba0a4fb4e54f322c
Difference Hash:c17900430c1d380a
Wavelet Hash:00000000ffffffff
Color Hash:#d22d9b

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data