Security Report: fotodiket.se - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b238d8bf-534a-4d87-a694-be976b5d16be Domain and IP registration (RDAP)/api/v1/rdap/b238d8bf-534a-4d87-a694-be976b5d16beHow often this domain was scanned/api/v1/domain/stats/fotodiket.se Scan history for this domain/api/v1/domain/history/fotodiket.se?limit=15

This website contacted 9 IPs in 3 countries across 9 domains to perform 54 HTTP transactions. The main domain is fotodiket.se.

Submitted URL: https://fotodiket.se

Effective URL:

https://www.fotodiket.se/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised concert-photo site now serving ClickFix / ErrTraffic-Exvicy malware: fake Cloudflare 'Human Verification' overlay instructs Windows users to paste Terminal commands. Critical YARA and IDS hits confirm infection.

Risk Factors (6)

Known malicious kit roster matches (ErrTraffic/Exvicy WordPress injection + ClickFix Win+X overlay kits) — analyst-vetted ground truth

CRITICAL high-precision YARA hits for injected ClickFix / blockchain-hosted overlay loader on the HTML body

Fake Cloudflare 'Human Verification' overlay telling Windows visitors to paste attacker-controlled commands into Terminal (ClickFix)

EtherHiding-style use of Polygon smart contracts / public RPC nodes to fetch the malicious overlay host

JavaScript blocks DevTools, view-source and right-click (anti-analysis)

Compromised WordPress content: legitimate Swedish concert-photography site now serving an injected malware loader

Domain age information unavailable

Details

Page Title

Fotodiket - En Nära Scenen Upplevelse!other network

Scan Type

public

Favicon Hash

MMH3: 159964282

MD5: 153ee94af5bb423cf2c3d53635245563

Domain Name Analysis

You're looking at domain 'fotodiket.se' on the Swedish country-code top-level domain (.se) and has no subdomain. The second-level label 'fotodiket' is 9 characters long containing 4 vowels alongside five consonants. Word splitting yields 3 words: foto, dike, t. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.51s

Total Load Time

3.6 MB

Total Size

Language Analysis

Primary Language

🇸🇪Swedish

Code: sv

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:sv-SE

Text Length:1,419 chars

Detector Agreement:40%

Website Classification

Primary Category

technology software37% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

37%

corporate

35%

cryptocurrency blockchain

35%

documentation technical

29%

adult content

28%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	109.235.174.18	Sweden	AS41528Loopia AB
6	172.67.68.134Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	193.32.220.134	Frankfurt am Main, Hesse, Germany	AS48314IP-Projects GmbH & Co. KG
6	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
6	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
6	162.159.138.60Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	193.32.220.132	Frankfurt am Main, Hesse, Germany	AS48314IP-Projects GmbH & Co. KG
6	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
54	9	-	-