Security Scan: Bindslev Håndværker Museum

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/88a26161-1397-4ec0-81f8-991f6b21e88a Domain and IP registration (RDAP)/api/v1/rdap/88a26161-1397-4ec0-81f8-991f6b21e88a Certificate Transparency/api/v1/ct/bindslev-museum.dk How often this domain was scanned/api/v1/domain/stats/bindslev-museum.dk Scan history for this domain/api/v1/domain/history/bindslev-museum.dk?limit=15

This website contacted 4 IPs in 2 countries across 5 domains to perform 42 HTTP transactions. The main domain is bindslev-museum.dk and was registered 21 years ago.

Submitted URL: https://bindslev-museum.dk

Effective URL:

https://www.bindslev-museum.dk/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Legitimate old Danish museum site whose pages have been compromised with the ClearFake ClickFix loader (Polygon EtherHiding) — critical malware injection; visitors, especially Windows users, should not load the page.

Risk Factors (5)

Known malicious kit ClearFake (clearfake-polygon-loader-2026-10) injected into the page

CRITICAL YARA rule ClearFake_Polygon_Contract_Loader matched in HTML body

HIGH YARA rule ClearFake_Rival_Kit_Cleanup matched — overlay/navigation-blocking logic

Obfuscated JavaScript consistent with ClearFake first-stage loader

Compromised-site injection: legitimate museum content carrying attacker-controlled loader script

Domain age information unavailable

Details

Page Title

Bindslev Håndværker Museum

Scan Type

public

Favicon Hash

MMH3: 530492348

MD5: dcab89b8e04bf53fcd7f6a44a8cb4fae

Domain Name Analysis

The domain name 'bindslev-museum.dk' uses the Danish country-code top-level domain (.dk). The core label 'bindslev-museum' covers 15 characters split between five vowels and nine consonants, along with one hyphen. Splitting it apart reveals 3 words: binds, lev, museum. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.46s

Total Load Time

2.9 MB

Total Size

Language Analysis

Primary Language

🇩🇰Danish

Code: da

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:da-DK

Text Length:2,158 chars

Detector Agreement:50%

Website Classification

Primary Category

unknown0% confidence

Type: dynamic

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	46.183.138.100	Denmark	AS47292Sentia Denmark A/S
10	104.20.33.75Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	172.66.174.217Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	142.251.110.95Google · CDN	United States	AS15169Google LLC
42	4	-	-