ScanMalware.com

Security Scan Report: novohair.se

Redirected to:
https://www.novohair.se/
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a8e082c7-6fce-4383-93b0-3f198d6dba48Domain and IP registration (RDAP)/api/v1/rdap/a8e082c7-6fce-4383-93b0-3f198d6dba48How often this domain was scanned/api/v1/domain/stats/novohair.seScan history for this domain/api/v1/domain/history/novohair.se?limit=15
This website contacted 38 IPs in 4 countries across 27 domains to perform 168 HTTP transactions. The main domain is novohair.se.

Submitted URL: https://novohair.se

Effective URL:
https://www.novohair.se/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised WordPress clinic site serving a ClearFake/ClickFix chain: fake bscSl plugin loader plus EtherHiding BSC-testnet contract reader (critical YARA) with critical EtherHiding IDS alerts and malware-flagged script CDNs. Avoid.

Risk Factors (5)
ClearFake/ClickFix fake WordPress plugin loader injected into the page (CRITICAL YARA, roster-anchored)
EtherHiding BSC testnet contract reader injected via admin-ajax (CRITICAL YARA, roster-anchored)
Critical IDS alerts: ET MALWARE EtherHiding Exfil M2 (x3)
Third-party scripts served from malware-flagged delivery domains cdn.quickdelivr.com and cdn.claritydelivr.com
Obfuscated blockchain-based payload retrieval designed to evade takedown
Domain age information unavailable

Details

Page Title

Hårtransplantation i Berlin - Kvalitet Och Säkerhet - Novohair

Scan Type

public

Domain Name Analysis

Domain 'novohair.se' uses the Swedish country-code top-level domain (.se) without a subdomain. The core label 'novohair' covers 8 characters holding 4 vowels versus 4 consonants. Breaking it apart gives two words: novo, hair. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://novohair.se

Page Load Overview

2.23s
Total Load Time
4.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:13,507 chars
Detector Agreement:60%

Website Classification

Primary Category

corporate50% confidence
Type: spa
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20141.193.213.10Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
4192.0.77.37San Francisco, California, United States
AS2635Automattic, Inc
495.129.234.18Russia
AS57724Ddos-guard Ltd
435.197.238.197Google · CDNCity of London, England, United Kingdom
AS396982Google LLC
4162.159.128.61Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.153.119Google · CDNUnited States
AS15169Google LLC
4192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
4142.251.14.95Google · CDNUnited States
AS15169Google LLC
4142.250.154.97Google · CDNUnited States
AS15169Google LLC
4142.251.110.94Google · CDNUnited States
AS15169Google LLC
16838--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D3E3FA728CE550335627C1C8AA76BB5EA9F2E203CA0B858573AC038C9FC5D5BD95B34D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:z6gxW7ex16wf8sBT7GfU2u2bsxKDczFqjs9h9wluJbDqZwQo:I7xY8sBT7GfU2u2bzjo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:154855:An01QxCCoCAIQAABcCiEKMUiCYikAAsxl8AAMoN8CAQSIBLynAbJq4gQ4GArkIOPw0ABthOYfRS6IgQiBG9BAIAAEuJQCFEI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff8f8f0e0f0f0f0
Perceptual Hash:e89162bdb196a995
Difference Hash:d381a1959283a3c7
Wavelet Hash:f9f0f0f0e0e0f0f0
Color Hash:#c3c587

Other Hashes

Crop Resistant:d381a1959283a3c7,60f0c0fc1f84f83f,f3f9f0c0061ce002,0000000000000000,69c64383c3c8c84d,242139181e4adb5b

Scan History

Scan history not available

Unable to load historical scan data