Security Scan Report: shop95.de

Site favicon
Submitted: Completed: publiccompleted

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

German lamp/decor shop whose domain is flagged as a malware loader; page itself says it is offline after a hacker attack, and its scripts call blockchain testnet RPCs. Suspected compromised site — do not interact.

Risk Factors (4)
Content-malware threat-intel match (malware loader) on the primary domain
Unexpected blockchain testnet RPC calls from a lighting/decor retail site
ML classifier scores 'phishing scam' at 92%
Page claims it is offline after a hacker attack — indicative of a compromised, unremediated site
Domain age information unavailable

Details

Page Title

shop95 wir haben die trends.

Scan Type

public

Domain Name Analysis

You're looking at domain 'shop95.de' on the German country-code top-level domain (.de). Its registrable label 'shop95' stretches across 6 characters with one vowel and three consonants, along with two digits. Word splitting yields 2 words: shop, 95. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://shop95.de

Page Load Overview

3.01s
Total Load Time
124 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:47%
Script:Latin
Direction:ltr

Detection Details

Text Length:86 chars
Detector Agreement:75%

Website Classification

Primary Category

phishing scam92% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

phishing scam
92%
e-commerce shopping
85%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1212.172.221.6Bremen, Baden-Wurttemberg, Germany
AS12312ecotel communication ag
1172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
115.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
13.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
135.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
88--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11543C06978677BBE92FA80CB79425E19C4C0F1708F939058C5A5AECFCBC2D444F9A643

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:hWoaIWRy9aqwxC7EVWkcfGlJYB9M4PcHR13q4+h2WCHaHKOYF63+ZtMCqWyVyOfc:hWobW9qaKLsaB+4s3ttsZOZtMCfyVw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:57567:kBQhgwEMMgIpg4ABq9wECgSCQFoENgiRDQBQSYGOIEKDAEBIAyBAN1hoUDAg7AYEOIUMwcyBrSERQgKWuCQEEqYAAUc4OEGI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7c3ffffffff
Perceptual Hash:e6668c9999333366
Difference Hash:100c4d0e00080000
Wavelet Hash:fce4e4c00f0f0f0f
Color Hash:#86672d

Other Hashes

Crop Resistant:100c4d0e00080000

Scan History

Scan history not available

Unable to load historical scan data