Security Scan Report: se02.children-store.lol

Redirected to:
https://get-derila.com/derila/product-1?l=de&c=eur&vndr=evf&evf=1&uid=...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 38 IPs in 3 countries across 27 domains to perform 112 HTTP transactions. The main domain is children-store.lol and was registered 1 month ago.

Submitted URL: https://se02.children-store.lol/ZCjdSePH/

Effective URL:
https://get-derila.com/derila/product-1?l=de&c=eur&vndr=evf&evf=1&uid=...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

4
Risk Score

Unrelated host redirects to a German Derila pillow storefront with aggressive discount marketing, but no forms, no credential or payment collection, and no threat-intel, YARA or IDS hits. Deceptive sales funnel rather than phishing.

Risk Factors (3)
Redirect from an unrelated, oddly named host (children-store.lol) into the final selling domain — a common pattern in affiliate ad-arbitrage funnels
Aggressive -70% discount and fabricated urgency/review claims ('11.000+ Personen vertrauen uns') without verifiable merchant identity
Age and reputation of the ENTRY domain (children-store.lol) do not apply to get-derila.com, whose own age/reputation is unknown and unranked
Safety Factors (5)
No credential, login or payment form present on the page
No threat-intelligence matches against the page or its loaded resources
No JavaScript malware, kit-roster, or IDS/Safe Browsing hits
No cross-origin credential exfiltration detected; outbound POST is a standard analytics pixel
Content is ordinary e-commerce product marketing (ML: e-commerce shopping, 84%)
Domain age information unavailable

Details

Page Title

Derila Kissen | Derila

Scan Type

public

Domain Name Analysis

You're looking at domain 'se02.children-store.lol' on the .lol top-level domain, featuring subdomain 'se02'. Its registrable label 'children-store' stretches across 14 characters with four vowels and nine consonants, notching 1 hyphen. Word splitting yields two words: children, store. Median word length is 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://se02.children-store.lol/ZCjdSePH/

Page Load Overview

6.35s
Total Load Time
3.7 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:13,427 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping84% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
84%
healthcare medical
75%
adult content
44%
government public service
40%
corporate
35%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
38104.18.19.54Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
268.183.255.181Slough, England, United Kingdom
AS14061DigitalOcean, LLC
2104.26.14.210Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2192.178.183.94Google · CDNUnited States
AS15169Google LLC
234.36.244.111Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2142.251.20.97Google · CDNUnited States
AS15169Google LLC
2151.101.66.217Fastly · CDNUnited States
AS54113Fastly, Inc.
2104.26.7.169Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
11238--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T141543A7658F100BD4C5351E897396A267E0BF19BDB6D89C4B7EC4320BF83C969A03A5C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:E7+34SgrJ+k/oF5XGM6Tgi2H7k2kWIasjUkaPijuWF4E9fGvo1p+:ExS0J+kQF5XSGHZsj65EOo1p+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:294429:lQjpEEgGUV4Kmg1pNggHUIVgEBBvQNJoaTIkAYYCxFEMAQV4ITMRAgmCjpQLgsQgCUEEIwAmIUsRwiSBDvaclIQL0DiQBqGK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00020200ffffff
Perceptual Hash:950ceafa1fe4cc03
Difference Hash:32f6e6e6fc5c4fca
Wavelet Hash:ff000202021fffff
Color Hash:#783a69

Scan History

Scan history not available

Unable to load historical scan data