Security Scan Report: meviboutiquegym.nl

Site favicon
Submitted: Completed: publiccompleted
This website contacted 31 IPs in 3 countries across 17 domains to perform 168 HTTP transactions. The main domain is meviboutiquegym.nl and was registered 4 years ago.

Submitted URL: https://meviboutiquegym.nl

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Legitimate-looking Dutch gym on an aged domain whose own domain is flagged as 'clearfake' malware by two feeds; page scripts hit BSC RPC endpoints, the ClearFake payload channel. Site is likely compromised — do not enter credentials.

Risk Factors (3)
Multi-source corroborated 'clearfake' malware indicator on the primary domain
Blockchain RPC endpoints contacted by page scripts — payload retrieval channel associated with the flagged malware family
Known ClearFake-targeted platform (WordPress/WooCommerce)
Domain age information unavailable

Details

Page Title

Mevi Boutique

Scan Type

public

Domain Name Analysis

Domain 'meviboutiquegym.nl' uses the Dutch country-code top-level domain (.nl) and has no subdomain. Its registrable label 'meviboutiquegym' stretches across 15 characters holding 7 vowels versus 8 consonants. Word splitting yields 4 words: me, vi, boutique, gym. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://meviboutiquegym.nl

Page Load Overview

8.03s
Total Load Time
15.1 MB
Total Size

Language Analysis

Primary Language

🇳🇱Dutch
Code: nl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:nl-NL
Text Length:6,859 chars
Detector Agreement:67%

Website Classification

Primary Category

social_media50% confidence
Type: spa
Method: structural

All Detected Categories

social_media
50%
news/blog
40%

Detected Features

Login Form
Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1885.10.159.47Netherlands
AS34762Combell NV
5184.24.77.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
5142.251.127.95Google · CDNUnited States
AS15169Google LLC
5142.251.13.132Google · CDNUnited States
AS15169Google LLC
599.84.152.37Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
5184.24.77.146Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
5172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
53.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
53.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
16831--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AB544B61B9761C3A106F13DFD013271D60CBDBFEE612A6F4B5BA422893F2D907A87158

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:91VEDsAqpAKAeBAzAMAlSA2+MUKACvTxUqhU39pdO6TUi3cX8gkXkYrv/O+DXUnF:I1vf8RxNQTxUqh80DwcX8vXkYrv/OAJw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:283472:KiBGICAiIIWRVkJMzUSBkgwIIZHIGACQE8GGBTADVQKwNmFTAQIENUOSgSAG25BCILAQkYGaAhVAjQJASEQKMa6OiMKJIicI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c90848c98080ffff
Perceptual Hash:e849b754a69346b6
Difference Hash:93339393b3b31b07
Wavelet Hash:c908c9c9c080ffff
Color Hash:#5cac53

Scan History

Scan history not available

Unable to load historical scan data