Security Report: bibro.pl - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a73f27fe-a41f-4437-ac5d-d990736760ba Domain and IP registration (RDAP)/api/v1/rdap/a73f27fe-a41f-4437-ac5d-d990736760baHow often this domain was scanned/api/v1/domain/stats/bibro.pl Scan history for this domain/api/v1/domain/history/bibro.pl?limit=15

This website contacted 15 IPs in 3 countries across 10 domains to perform 115 HTTP transactions. The main domain is bibro.pl and was registered 13 years ago.

Submitted URL: https://bibro.pl

AI Security Verdict

High Risk

Confidence: 95%

Risk Score

Legitimate 13-year-old Polish shop whose page is compromised and serving an injected ClickFix Win+X/Terminal 'Human Verification' overlay with PowerShell payload delivery and EtherHiding traffic; do not follow any on-screen instructions.

Risk Factors (5)

Analyst-vetted ClickFix Win+X Terminal overlay kit injected into the page (CRITICAL phishing category)

CRITICAL YARA rule ClickFix_WinX_Overlay_Kit matched in the HTML body

Multiple CRITICAL network IDS alerts for ClickFix domain gateway.tenderly.co and EtherHiding exfiltration

Injected overlay impersonates a Cloudflare security check ('Ray ID', 'review the security of your connection') on a non-Cloudflare domain

Third-party resource checkyoubrowse.codes flagged as malicious host by two independent threat feeds

Domain age information unavailable

Details

Page Title

Bibro.pl Las ogród Nowy Targ – kosiarki, odśnieżarki, pilarki, agregaty prądotwórcze, myjki ciśnieniowe

Scan Type

public

Favicon Hash

MMH3: -717020207

MD5: ede462604835b69598530eba0619037b

Domain Name Analysis

Domain 'bibro.pl' uses the Polish country-code top-level domain (.pl). The second-level label 'bibro' is 5 characters long split between 2 vowels and 3 consonants. It segments into 2 words: bi, bro. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

10.40s

Total Load Time

7.0 MB

Total Size

Language Analysis

Primary Language

🇵🇱Polish

Code: pl

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pl-PL

Text Length:3,471 chars

Detector Agreement:75%

Website Classification

Primary Category

documentation technical78% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

78%

adult content

75%

travel tourism

71%

e-commerce shopping

67%

government public service

56%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	109.95.159.54	Poland	AS48896dhosting.pl Sp. z o.o.
7	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	142.251.20.95Google · CDN	United States	AS15169Google LLC
7	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
7	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
7	142.251.14.94Google · CDN	United States	AS15169Google LLC
7	32.188.238.39Aws · CLOUD	Boardman, Oregon, United States	AS16509Amazon.com, Inc.
7	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	32.190.107.72Aws · CLOUD	Boardman, Oregon, United States	AS16509Amazon.com, Inc.
7	13.32.99.38Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
115	15	-	-