Security Scan Report: promoshops.eu

Redirected to:
https://www.promoshops.eu/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 4 countries across 7 domains to perform 123 HTTP transactions. The main domain is promoshops.eu.

Submitted URL: https://promoshops.eu

Effective URL:
https://www.promoshops.eu/
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Aged Italian marketing company site whose own domain is flagged by two independent feeds as the malware framework 'ClearFake', plus a further loader indicator; page scripts also contact BSC testnet RPC nodes. Likely compromised — do not interact.

Risk Factors (3)
Multi-source content-malware indicator of compromise (ClearFake) against the scanned primary domain
Additional single-source 'unknown loader' malware indicator against the same domain
Cross-origin fetches to multiple public BSC testnet RPC nodes from a non-crypto marketing page
Domain age information unavailable

Details

Page Title

PromoShops

Scan Type

public

Domain Name Analysis

Domain 'promoshops.eu' uses the .eu country-code top-level domain and has no subdomain. Count 10 characters in 'promoshops' with 3 vowels and seven consonants. Word splitting yields 2 words: promo, shops. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://promoshops.eu

Page Load Overview

8.52s
Total Load Time
4.1 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:943 chars
Detector Agreement:67%

Website Classification

Primary Category

education learning79% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

education learning
79%
adult content
72%
government public service
70%
e-commerce shopping
65%
corporate business
54%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18194.182.111.166Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
7142.251.110.95Google · CDNUnited States
AS15169Google LLC
7185.152.64.17Datacamp · CDNPrague, Prague, Czech Republic
AS60068Datacamp Limited
715.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
73.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
7142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
7104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
715.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
735.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
7172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12316--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CE1429A2FF80203A126753C8683477FCE56F9185C3064EF8B295D3E47BC9AD2759E612

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:zz/z4zvOuz5iFwFjLfgJXXTYbZyV4uOi5BbIZmQ2jfMO6nBNJgskSinRwzY/Ffhi:b4i94vmnTOZC4uOi55IZmJ+6fhi

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:195845:GEAzxgMAnIogjgiwAJMmEwygJAMIQB6DFcBhgZA5RwxEIAiEAmAMOYMqQJDsElsEA4AGsRrAoDAwhswqCDhHBQwQQQEmDAaY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000002800ffc3c3
Perceptual Hash:b103fc4e43e99e64
Difference Hash:c9dcd8d848b4060e
Wavelet Hash:20060e3c0cffc3ff
Color Hash:#c587b7

Scan History

Scan history not available

Unable to load historical scan data