Security Scan Report: skiland.cz

Redirected to:
https://www.skiland.cz/
Site favicon
Submitted: Oct 14, 2026, 3:49:53 PMCompleted: Oct 14, 2026, 3:51:51 PMpubliccompleted

This website contacted 44 IPs in 3 countries across 26 domains to perform 220 HTTP transactions. The main domain is skiland.cz and was registered 22 years ago.

Submitted URL: https://skiland.cz

Effective URL:

https://www.skiland.cz/
Redirected

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

Legitimate 22-year-old Czech resort site that has been compromised: analyst-vetted IClickFix/EtherHiding malware loader injected, CRITICAL IDS EtherHiding alert, and obfuscated scripts hiding flagged hosts. Avoid visiting until cleaned.

Risk Factors (5)
Compromised WordPress site serving a ClickFix/EtherHiding malware loader to visitors
CRITICAL IDS alert for EtherHiding exfiltration
Analyst-vetted malicious kit (IClickFix) matched via YARA on the live page body
Obfuscated JavaScript hiding known-attacker C2/blockchain-gateway hosts
Third-party resource domain zvh3.com flagged as iclickfix malware by multiple threat feeds
Domain age information unavailable

Details

Page Title

Skiland - Skiland

Scan Type

public

Domain Name Analysis

The domain 'skiland.cz' uses the Czech country-code top-level domain (.cz). The second-level label 'skiland' is 7 characters long with 2 vowels and five consonants. Segmentation suggests two words: ski, land. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://skiland.cz

Page Load Overview

13.99s
Total Load Time
8.1 MB
Total Size

Language Analysis

Primary Language

🇨🇿Czech
Code: cs
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:cs
Text Length:6,358 chars
Detector Agreement:75%

Website Classification

Primary Category

documentation technical49% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
49%
corporate
35%
news/blog
20%
forum
20%

Detected Features

Search
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5217.198.114.188Czech Republic
AS34222ZONER a.s.
5172.217.208.95Google · CDNUnited States
AS15169Google LLC
554.192.35.96Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
5142.251.150.119Google · CDNUnited States
AS15169Google LLC
5142.251.20.97Google · CDNUnited States
AS15169Google LLC
5192.178.183.94Google · CDNUnited States
AS15169Google LLC
5142.251.151.4Google · CDNUnited States
AS15169Google LLC
577.75.79.172Czech Republic
AS43037Seznam.cz, a.s.
5157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
523.194.190.151Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
22044--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E3644B617C87443A327F128FA093B70C20AEC8FED6A5A1E5F4BE5126B7B1DD03792615

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:QqfIPPQOHASA6A0sA8AZNAxaO6p6kMVVZmlXst6GsXst6oDXst6TiXst6GZ8XstT:Q4HfSBkI6kMVVZmmIn0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:311870:xOFiVkBISYQFUULVQEINg2GQgQjpkGepAAGUoAhVQdqUi4cDkQlQggChiIgYEBIRELgKgYZkAChLxqwBGhAkD6KEqsSIQgAV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000080008407ffff
Perceptual Hash:b652ec355a0515db
Difference Hash:a4a5252949de572b
Wavelet Hash:00c0d011ec0fffff
Color Hash:#a7c587

Scan History

Scan history not available

Unable to load historical scan data