Security Report: slow-work.eu - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/500b91f1-a06d-4e79-b35b-a9c537f9e206 Domain and IP registration (RDAP)/api/v1/rdap/500b91f1-a06d-4e79-b35b-a9c537f9e206 Certificate Transparency/api/v1/ct/slow-work.eu How often this domain was scanned/api/v1/domain/stats/slow-work.eu Scan history for this domain/api/v1/domain/history/slow-work.eu?limit=15

This website contacted 6 IPs in 2 countries across 5 domains to perform 36 HTTP transactions. The main domain is slow-work.eu and was registered 10 years ago.

Submitted URL: https://slow-work.eu

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

One-day-old 'Slow Work' page silently loads an EtherHiding/ClearFake-style malware chain: blockchain smart-contract calls trigger 3 CRITICAL malware IDS alerts. Avoid; do not visit.

Risk Factors (5)

3 CRITICAL malware-category IDS alerts (EtherHiding exfiltration) correlated with blockchain smart-contract calls from page scripts

Domain is 1 day old and unranked in Cisco Umbrella, hosting a hidden EtherHiding/exploit-kit delivery chain

Primary domain reported as a malware loader in community threat intel

Page loads script from a third-party domain (checkyoubrowse.codes) independently reported malicious by two feeds

Benign 'slow work philosophy' content appears to be a decoy fronting a malicious payload loader

Domain age information unavailable

Details

Page Title

Slow Work | Snail Project

Scan Type

public

Favicon Hash

MMH3: -796969082

MD5: 5acc63c3ea3c4f8ef3297e207e2c5cee

Domain Name Analysis

The domain 'slow-work.eu' uses the .eu country-code top-level domain while skipping any subdomain. Count 9 characters in 'slow-work' split between 2 vowels and 6 consonants, along with 1 hyphen. Word splitting yields two words: slow, work. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.79s

Total Load Time

2.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-GB

Text Length:2,658 chars

Detector Agreement:75%

Website Classification

Primary Category

adult content52% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

adult content

52%

government public service

42%

education learning

31%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	67.205.42.17	Ashburn, Virginia, United States	AS26347New Dream Network, LLC
6	142.251.14.94Google · CDN	United States	AS15169Google LLC
6	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
6	142.251.110.94Google · CDN	United States	AS15169Google LLC
36	6	-	-