ScanMalware.com

Security Scan Report: lofty-fabrics.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a92b1122-2ee0-411b-9178-fb47b9b153e7Domain and IP registration (RDAP)/api/v1/rdap/a92b1122-2ee0-411b-9178-fb47b9b153e7How often this domain was scanned/api/v1/domain/stats/lofty-fabrics.comScan history for this domain/api/v1/domain/history/lofty-fabrics.com?limit=15
This website contacted 1 IP in 1 country across 2 domains to perform 9 HTTP transactions. The main domain is lofty-fabrics.com and was registered 3 years ago.

Submitted URL: https://lofty-fabrics.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Compromised WordPress site serving ClearFake EtherHiding loader (YARA CRITICAL/HIGH, roster-anchored) plus casino SEO spam; primary domain flagged as malware loader. Do not visit or interact.

Risk Factors (5)
Known malicious ClearFake kit injected into the page (roster-anchored, CRITICAL + HIGH)
Two high-precision YARA malware rules matched on the HTML body
Primary-domain threat-intel match for malware loader (unknown loader)
Classic compromised/repurposed WordPress site running casino SEO spam in several languages
Suricata obfuscator-usage hunting alerts (informational, corroborating)
Domain age information unavailable

Details

Page Title

WordPress – Eine weitere WordPress-Website

Scan Type

public

Domain Name Analysis

The domain name 'lofty-fabrics.com' uses the commercial generic top-level domain (.com) without a subdomain. The second-level label 'lofty-fabrics' is 13 characters long with three vowels and nine consonants; it also includes 1 hyphen. Word splitting yields two words: lofty, fabrics. Median word length is 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lofty-fabrics.com

Page Load Overview

9.15s
Total Load Time
87 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:3,255 chars
Detector Agreement:50%

Website Classification

Primary Category

gambling betting100% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
100%
entertainment media
97%
travel tourism
77%
technology software
74%
adult content
66%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
981.88.34.235Germany
AS8648dogado GmbH
91--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11F73865093B098F4B97F433B5D65A2145623EA02C9457BD9B0F3F290A58DAA50BE3F0E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:t/y0WOlAA7x1GrcmRiBmgT0cTrnbO27kYiypwYMIu32iM:M0NlAA91GrcmRiBmgT0cTrnbO27kAb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:78340:yKRDnAgmAIBIIhgQOIwVDAkJhgkuiAYkIGEywIFFUDmkcmwOwDUMulCIDBjHYpKgAICjWIw2VIFJBxIQZUAAEVCwIGAQSTwS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000ffffffffff
Perceptual Hash:ba0a4eb1e547333c
Difference Hash:c17900471c1d2c00
Wavelet Hash:00000000ffffffff
Color Hash:#e06c6c

Other Hashes

Crop Resistant:c17900471c1d2c00,01c1c179314111c1

Scan History

Scan history not available

Unable to load historical scan data