Security Scan Report: www.farmerslabseeds.com

Redirected to:
https://farmerslabseeds.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 4 domains to perform 117 HTTP transactions. The main domain is farmerslabseeds.com and was registered 10 years ago.

Submitted URL: https://www.farmerslabseeds.com

Effective URL:
https://farmerslabseeds.com/
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Legitimate-looking cannabis seed shop whose page carries an analyst-vetted ClearFake Polygon/EtherHiding loader (CRITICAL YARA). No credential forms, but the injected first-stage script can push malware to Windows visitors — avoid.

Risk Factors (3)
ClearFake Polygon/EtherHiding contract loader injected into the page (CRITICAL, kit-roster anchored) — delivers a second stage to Windows visitors, typically leading to fake-browser-update / ClickFix malware
Obfuscated inline JavaScript using encoding/decoding and crypto APIs
Domain unranked in Cisco Umbrella top 1M (weak prior only)
Domain age information unavailable

Details

Page Title

Marijuana Seeds Canada For Sale | Buy Cannabis Seeds Canada

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www.farmerslabseeds.com' is registered, featuring subdomain 'www'. Count 15 characters in 'farmerslabseeds' containing five vowels alongside 10 consonants. Word splitting yields three words: farmers, lab, seeds. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.farmerslabseeds.com

Page Load Overview

30.00s
Total Load Time
3.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-CA
Text Length:51,386 chars
Detector Agreement:80%

Website Classification

Primary Category

documentation technical50% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
50%
blog personal website
48%
social media network
38%
e-commerce shopping
37%
corporate
35%

Detected Features

Search
Articles
Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22141.193.213.20Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
19141.193.213.21Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
19142.251.20.95Google · CDNUnited States
AS15169Google LLC
19142.251.14.94Google · CDNUnited States
AS15169Google LLC
19142.251.14.95Google · CDNUnited States
AS15169Google LLC
19142.251.20.94Google · CDNUnited States
AS15169Google LLC
1176--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17925F7E179AA1D39601F02DFA013328C74D6DED6F651A4E8F5FE822867F4CD132A219D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24576:JQH/SNSteWVZZOJt6Z4bmoDiZsrf7Fm8Yitft6ZGt6ZyK:tK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:969967:HA4IQS7lTwEJlrDDBjISuELOTVZi7AACREEQEiBIxBDSlgRIYSIEq1w9ATsVhRBGMVBHjQAAMDscELbYiJ4AAixhgQ0mYHCH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:feffffffffffffff
Perceptual Hash:d555555555555554
Difference Hash:0000000808000000
Wavelet Hash:0e0e3e26263e3232
Color Hash:#2dd29e

Other Hashes

Crop Resistant:0000000808000000

Scan History

Scan history not available

Unable to load historical scan data