Security Scan Report: handgemachtemode.eu

Redirected to:
https://www.handgemachtemode.eu/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 8 domains to perform 38 HTTP transactions. The main domain is handgemachtemode.eu.

Submitted URL: https://handgemachtemode.eu

Effective URL:
https://www.handgemachtemode.eu/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 94%

9
Risk Score

Compromised hand-made fashion shop running the ErrTraffic/Exvicy WordPress loader with EtherHiding blockchain-based next-stage delivery; do not browse, report to host and site owner.

Risk Factors (6)
Known malicious kit ErrTraffic/Exvicy WordPress injected loader identified by analyst-vetted roster and YARA
EtherHiding blockchain-based next-stage loader with obfuscated script hiding threat-feed RPC hosts
CRITICAL IDS malware/exfiltration alert (EtherHiding Exfil M2)
Multi-feed malicious IoC for external resource makeverizyjar.info (malware kit 'ek clearfake-1')
Injected third-party gambling/SEO spam content unrelated to the shop's stated purpose
Third-party RPC/blockchain domains with abuse-reputation tags loaded in obfuscated code
Domain age information unavailable

Details

Page Title

Handgemachte Mode - Originale handgemachte Mode nach Maß

Scan Type

public

Domain Name Analysis

Domain 'handgemachtemode.eu' uses the .eu country-code top-level domain. Count 16 characters in 'handgemachtemode' with six vowels and 10 consonants. Breaking it apart gives 5 words: hand, ge, macht, e, mode. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://handgemachtemode.eu

Page Load Overview

13.12s
Total Load Time
918 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:17,687 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping96% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
96%
corporate
35%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8185.8.237.11Czech Republic
AS208414WEDOS Internet, a.s.
535.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
5104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.20.97Google · CDNUnited States
AS15169Google LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5216.239.32.36Google · CDNUnited States
AS15169Google LLC
5104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
387--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14F74B6DF97B93A35334B9288BD92B268B5FD8023DA4018617CE585BCC7C11D7126B6CE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:XjP8F4kQonjlDwa4k1DTABA54AwR5jWQK1ljWQK1Ia3vygt5HrD5zTEoYTBp23h3:gF4kQAcqD4QovygtAp23hx3t

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:351138:oFWMCIGAsGSGiEDkApBWZC4IsUUwTKNhZisOCAQQkhwZgFBE8BWEtICDwpAEUgwAyAA0go1RAADruCEAkSNNLBEBaFVkvchw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:81ffffffffe7ff04
Perceptual Hash:fe293c2a3c29362b
Difference Hash:130400000c4c002c
Wavelet Hash:80fcbdbda5a1bd00
Color Hash:#c7e06c

Other Hashes

Crop Resistant:130400000c4c002c

Scan History

Scan history not available

Unable to load historical scan data