ScanMalware.com

Security Scan Report: czechandspeakebathrooms.com

Site favicon
Submitted: Sep 14, 2026, 4:47:32 AMCompleted: Sep 14, 2026, 4:48:57 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Legitimate-looking luxury bathroom brand site whose content is clean (no forms), but network IDS and threat-intel show malware (EtherHiding/iclickfix) and blockchain RPC traffic — treat as compromised, avoid.

Risk Factors
CRITICAL network IDS malware alert (EtherHiding exfiltration)
Malware Indicators of Compromise on the primary domain and a loaded third-party resource (xaz2.com / iclickfix)
Blockchain RPC domain contact (gateway.tenderly.co) used for likely covert payload/exfiltration
Domain only ~172 days old and unranked in Cisco Umbrella
Domain age information unavailable

Details

Page Title

Luxury Bathroom Fittings | Czech & Speake Bathrooms

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'czechandspeakebathrooms.com' is registered. The second-level label 'czechandspeakebathrooms' is 23 characters long with eight vowels and 15 consonants. Breaking it apart gives 5 words: czech, and, speak, e, bathrooms. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://czechandspeakebathrooms.com

Page Load Overview

32.55s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,375 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical52% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
52%
corporate
35%
news media journalism
31%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22146.75.122.133Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
796.6.17.18Akamai · CDNOslo, Oslo, Norway
AS16625Akamai Technologies, Inc.
723.227.38.74Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
7188.166.175.221Slough, England, United Kingdom
AS14061DigitalOcean, LLC
7192.178.183.95Google · CDNUnited States
AS15169Google LLC
7192.178.183.97Google · CDNUnited States
AS15169Google LLC
7104.18.40.137Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.110.97Google · CDNUnited States
AS15169Google LLC
7142.251.20.139Google · CDNUnited States
AS15169Google LLC
12716--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15BF23AB2E3AE04523F4D876871A6706C596CE235C8016BAB35BC357C1B985FB00ABD5F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:Wr9i5Q62I/xE6x4g5bn/GCGVQVcMdMZdypo6JyijGk5heJ:WJiCjVFDypSijGosJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:37235:mITgASCAUQwcNrEnHwCQFEAgBYYGSTmpGQAKOqMR6VCHMeVgDCQ4wjlgoSRRfaA4AQJnsNhoQAANwANgALAkOOhk20pCQAgg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0068f8cce6fbcc04
Perceptual Hash:f14b1e2d72582d56
Difference Hash:b0c04019cc12182c
Wavelet Hash:0078f8fceefbcc00
Color Hash:#2dd2d0

Other Hashes

Crop Resistant:b0c04019cc12182c,30d0c8c410998c4e,19cc8c1e67671b07,1898cc4e13182c0d,2307c37111190787

Scan History

Scan history not available

Unable to load historical scan data