Security Report: 6gems.gr - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9ac4a2bd-02ab-4339-ab23-04d323fa5e75 Domain and IP registration (RDAP)/api/v1/rdap/9ac4a2bd-02ab-4339-ab23-04d323fa5e75How often this domain was scanned/api/v1/domain/stats/6gems.gr Scan history for this domain/api/v1/domain/history/6gems.gr?limit=15

This website contacted 8 IPs in 3 countries across 6 domains to perform 91 HTTP transactions. The main domain is 6gems.gr.

Submitted URL: https://6gems.gr/

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Compromised WordPress shop serving two analyst-vetted CRITICAL kits: a fake Cloudflare 'Human Verification' ClickFix overlay (Win+X → Terminal paste) and an ErrTraffic/Exvicy loader, with EtherHiding exfiltration traffic. Do not interact — never paste the shown commands.

Risk Factors (5)

Injected ClickFix fake 'Human Verification' overlay driving users to paste terminal commands

Injected ErrTraffic/Exvicy WordPress loader (obfuscated base64 + new Function execution)

EtherHiding malware exfiltration traffic to blockchain RPC endpoints

Compromised legitimate-looking WordPress storefront used as malware delivery page

Domain registered 3 days ago and absent from any reputation ranking

Domain age information unavailable

Details

Page Title

Home - 6 GEMS

Scan Type

public

Favicon Hash

MMH3: -107301752

MD5: deb5bbb44e3158dbb80c9fea8695b780

Domain Name Analysis

The domain '6gems.gr' uses the Greek country-code top-level domain (.gr) with no subdomain. The registrable portion '6gems' spans 5 characters holding 1 vowel versus 3 consonants; it also includes one digit. Tokenizing the label suggests two words: 6, gems. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

36.16s

Total Load Time

3.4 MB

Total Size

Language Analysis

Primary Language

🇬🇷Greek

Code: el

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:el

Text Length:2,717 chars

Detector Agreement:67%

Website Classification

Primary Category

e-commerce shopping100% confidence

Type: spa

Method: ml+structural

All Detected Categories

e-commerce shopping

100%

cryptocurrency blockchain

96%

blog personal website

93%

adult content

77%

education learning

52%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	185.25.23.20	Greece	AS209150Th.papamichail Vainas - G.psaltakis G.p
11	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
11	192.0.77.48	San Francisco, California, United States	AS2635Automattic, Inc
11	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
91	8	-	-