ScanMalware.com

Security Scan Report: hairandbeauty-lounge.at

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8fbc5889-7df6-47cf-ae63-65c66a3cb7d8Domain and IP registration (RDAP)/api/v1/rdap/8fbc5889-7df6-47cf-ae63-65c66a3cb7d8How often this domain was scanned/api/v1/domain/stats/hairandbeauty-lounge.atScan history for this domain/api/v1/domain/history/hairandbeauty-lounge.at?limit=15
This website contacted 30 IPs in 2 countries across 16 domains to perform 149 HTTP transactions. The main domain is hairandbeauty-lounge.at and was registered 2 months ago.

Submitted URL: https://hairandbeauty-lounge.at

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate-looking Vienna salon whose WordPress site is compromised with an EtherHiding ClickFix kit: a fake 'Human Verification' overlay pushes visitors to paste PowerShell. Critical YARA, IDS and Safe Browsing hits confirm malware distribution.

Risk Factors (5)
Compromised WordPress site serving a ClickFix fake-verification overlay that social-engineers visitors into pasting attacker PowerShell
Blockchain-based (EtherHiding) payload staging designed to evade takedown of the loading script
Obfuscated injected script hiding known-attacker RPC/hosting domains
Newly registered domain (65 days) with no reputation ranking
Multi-source corroborated malware indicators on the domain itself and on a script host it loads
Domain age information unavailable

Details

Page Title

Home - Hair & Beauty Lounge

Scan Type

public

Domain Name Analysis

Within the Austrian country-code top-level domain (.at), 'hairandbeauty-lounge.at' is registered and has no subdomain. The core label 'hairandbeauty-lounge' covers 20 characters with nine vowels and 10 consonants; it also includes one hyphen. Breaking it apart gives 4 words: hair, and, beauty, lounge. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hairandbeauty-lounge.at

Page Load Overview

3.20s
Total Load Time
3.1 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:2,699 chars
Detector Agreement:50%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
33168.119.41.58Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
42.23.7.48Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
4142.251.13.97Google · CDNUnited States
AS15169Google LLC
4142.251.154.119Google · CDNUnited States
AS15169Google LLC
423.212.205.83Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
4172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.153.119Google · CDNUnited States
AS15169Google LLC
4172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.20.94Google · CDNUnited States
AS15169Google LLC
4172.217.117.4Google · CDNUnited States
AS15169Google LLC
14930--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B9D3D6B395A8407A226385C050653B1DF5D9D11BCA458BBCB3EC33BDAFCDDD28923658

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:6fynGlKOiW3bhph78yiZBrQQa1tdwGYoqqn3CUMU/CNc3b4QuvvcPb3ltqqny7BE:64g3bhph78VBrQQa1l

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:141756:SDo9FCKsKwggAKQgCAoCAAgWKgfeSggCMcsAGSRATACKAlh0wzBcXBAYTiKpmBQcigQrozjwCBl0OKhAGBVQQAhIwRgUBIBI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7e7e7e6e66767e7e
Perceptual Hash:90d3cf54f941fb04
Difference Hash:ccccccd4d4d4d4d4
Wavelet Hash:7e7e6e6e46465210
Color Hash:#e06c8d

Other Hashes

Crop Resistant:ccccccd4d4d4d4d4,e309010101010101,0505050505050505,2716c7c7e363e165

Scan History

Scan history not available

Unable to load historical scan data