Security Scan Report: www.teczkibezkwasowe.com

Submitted: Completed: publiccompleted
This website contacted 21 IPs in 2 countries across 12 domains to perform 105 HTTP transactions. The main domain is teczkibezkwasowe.com and was registered 9 years ago.

Submitted URL: https://www.teczkibezkwasowe.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate-looking Polish document-folder shop whose page has been compromised: HTML carries a CRITICAL Macfinger ClickFix (AMOS stealer) loader tag, confirmed by a hunting-rule hit, a CRITICAL IDS AMOS alert and a malicious third-party domain. Do not visit.

Risk Factors (5)
Injected ClickFix/AMOS stealer loader script in the page's own HTML — classic compromised-legitimate-site malware injection
CRITICAL malware IDS alert for AMOS loader script request
Domain flagged in threat intelligence as iclickfix malware (single-source, unverified)
Page loads a third-party domain (silverrogpuia.pro) corroborated as malicious by two independent feeds
Visitors may be shown a fake bot-protection/ClickFix prompt leading to AMOS infostealer installation
Domain age information unavailable

Details

Page Title

Home - Teczki na dokumenty

Scan Type

public

Domain Name Analysis

The domain 'www.teczkibezkwasowe.com' uses the commercial generic top-level domain (.com), featuring subdomain 'www'. The second-level label 'teczkibezkwasowe' is 16 characters long holding six vowels versus ten consonants. Word splitting yields eight words: te, czk, i, be, z, k, was, owe. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Teczki na dokumenty .. aa. mase mam soe Z SYSTEMEM OD GÓRY W DÓŁO Teczki i skoroszyty aktowe stworzone z myślą o kancelariach adwokackich, radcowskich i restrukturyzacyjnych, pracowniach projektowy...

Page Load Overview

3.18s
Total Load Time
2.4 MB
Total Size

Language Analysis

Primary Language

🇵🇱Polish
Code: pl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pl-PL
Text Length:4,491 chars
Detector Agreement:100%

All Detected Languages

🇵🇱pl(98%)🇩🇪de(1%)🇵🇹pt(1%)

Website Classification

Primary Category

government public service76% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
76%
corporate business
61%
documentation technical
57%
corporate
35%
news/blog
30%

Detected Features

Articles
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
61188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14142.251.20.94Google · CDNUnited States
AS15169Google LLC
9142.251.157.4Google · CDNUnited States
AS15169Google LLC
5142.250.154.95Google · CDNUnited States
AS15169Google LLC
5188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.150.4Google · CDNUnited States
AS15169Google LLC
5142.251.156.4Google · CDNUnited States
AS15169Google LLC
5142.251.151.4Google · CDNUnited States
AS15169Google LLC
5142.251.154.4Google · CDNUnited States
AS15169Google LLC
5142.251.155.4Google · CDNUnited States
AS15169Google LLC
10521--

Detected Technologies19

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19C73C7B33C995C22220F039FA023725CA8DAD9D5F512B2E5B8FE512867B4C9533E365D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:2qypzaJWAda+A0Aj8NAPAsz3pJ3pV+JIrZleIBd/ZEbOMUPhIehORK:2jtaJWAdVA0AjkAPAsZl9Bd/ZEbOZPhT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:79680:GJIFp8BCDTU5EGkCFDHAHrHKJaYUBocUAAijALFSkyBAIhEQAiHGENc4TKVi6ADgwAToRUAAqBCmq0ghhhJqIOjWCgRGgD/i

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8fc3e7c3c3fff3c3
Perceptual Hash:b433199f39cb9330
Difference Hash:1a060c0e16270717
Wavelet Hash:8ac2c3c3c39ff183
Color Hash:07000000000

Other Hashes

Crop Resistant:1a060c0e16270717

Scan History

Scan history not available

Unable to load historical scan data