Security Scan: Kvist Tagvinduer til skifer- og tagpaptage -

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/46fd8b4f-e212-48f1-a6da-a6101a975900 Domain and IP registration (RDAP)/api/v1/rdap/46fd8b4f-e212-48f1-a6da-a6101a975900 Certificate Transparency/api/v1/ct/tagvindue.dk How often this domain was scanned/api/v1/domain/stats/tagvindue.dk Scan history for this domain/api/v1/domain/history/tagvindue.dk?limit=15

This website contacted 7 IPs in 2 countries across 8 domains to perform 46 HTTP transactions. The main domain is tagvindue.dk and was registered 18 years ago.

Submitted URL: https://tagvindue.dk

Effective URL:

https://www.tagvindue.dk/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 91%

Risk Score

Legitimate-looking Danish roofing-window site whose page is compromised with an obfuscated IClickFix/EtherHiding loader that pulls an encrypted next stage from an Ethereum Sepolia contract; multiple critical malware IDS alerts and a vetted kit match.

Risk Factors (5)

Compromised legitimate website injecting an obfuscated ClickFix/EtherHiding malware loader

EtherHiding: encrypted stage retrieved from a blockchain contract and executed for Windows visitors

Critical network IDS malware/phishing alerts tied to the page's loaded resources

Threat-feed hosts hidden inside obfuscated JavaScript

Threat-intel match against the scanned domain tagvindue.dk (unknown loader, single-source)

Domain age information unavailable

Details

Page Title

Kvist Tagvinduer til skifer- og tagpaptage - Kvist Tagvinduer

Scan Type

public

Favicon Hash

MMH3: 638939210

MD5: 258a897e79c543bf1404e1c4d7ce36c7

Domain Name Analysis

Domain 'tagvindue.dk' uses the Danish country-code top-level domain (.dk) while skipping any subdomain. Count 9 characters in 'tagvindue' containing four vowels alongside five consonants. Segmentation suggests four words: tag, v, in, due. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.73s

Total Load Time

2.0 MB

Total Size

Language Analysis

Primary Language

🇩🇰Danish

Code: da

Confidence:34%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:da-DK

Text Length:3,333 chars

Detector Agreement:80%

Website Classification

Primary Category

real estate property85% confidence

Type: spa

Method: ml+structural

All Detected Categories

real estate property

85%

documentation technical

78%

government public service

65%

adult content

36%

corporate business

36%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	46.183.138.100	Denmark	AS47292Sentia Denmark A/S
6	142.251.110.95Google · CDN	United States	AS15169Google LLC
6	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	104.26.8.127Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.251.13.94Google · CDN	United States	AS15169Google LLC
6	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
6	104.21.72.64Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
46	7	-	-