ScanMalware.com

Security Scan Report: loumar.dk

Site favicon
Submitted: Oct 9, 2026, 5:50:51 AMCompleted: Oct 9, 2026, 5:51:41 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate-looking Danish streaming site whose page has been compromised with an IClickFix/EtherHiding ClickFix loader; YARA, kit roster, CRITICAL IDS and zvh4.com threat-intel all confirm malware delivery.

Risk Factors (5)
Injected ClickFix / EtherHiding loader that fetches and executes an encrypted second stage for Windows visitors
Known malicious kit (IClickFix) confirmed by analyst-vetted roster and YARA
CRITICAL IDS alerts for malware C2/exfiltration and contact with ClickFix domain zvh4.com
Multi-source threat-intel report on zvh4.com (unknown malware)
Loader is delivered from a site that appears to be a legitimate Danish streaming business, indicating compromise
Domain age information unavailable

Details

Page Title

Forside - Loumar

Scan Type

public

Domain Name Analysis

The domain 'loumar.dk' uses the Danish country-code top-level domain (.dk) without a subdomain. The registrable portion 'loumar' spans 6 characters split between three vowels and three consonants. Segmentation suggests two words: lou, mar. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://loumar.dk

Page Load Overview

10.95s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇩🇰Danish
Code: da
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:da-DK
Text Length:498 chars
Detector Agreement:67%

Website Classification

Primary Category

entertainment media72% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
72%
corporate
35%
e-commerce shopping
32%
government public service
29%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
946.183.138.100Denmark
AS47292Sentia Denmark A/S
9142.251.20.95Google · CDNUnited States
AS15169Google LLC
9142.251.20.94Google · CDNUnited States
AS15169Google LLC
9172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
455--

Detected Technologies10

X-UA-Compatible
100%
WordPressv7.1.3
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
WooCommerce
20%
Smart Slider 3
20%
HashThemes Total
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17B835C72F2981975332F83C5E1A6B36CB295E301DA438996F1FE216C63C89F414A674F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:vF7d9JB2Zypea0C17aE6m3Q+ZOfIWtAragAYAe8QAE52W7Qneeh+gus47XOfOYOZ:vRdl2UQa0CoE6oZOf3tArxAYAevAEVs+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:81335:spEUozQIWEAFsuBxExiLgBqERgEKSEAtxAGAAGbDNFJUEie0qARlUAkIRzCYJrRhAIBGMIU6UUQjGESsk7CACGWh4SJwEgA1

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff000000000000
Perceptual Hash:8ef5b1ddc7470822
Difference Hash:42330065653161a5
Wavelet Hash:ffff00000000ffff
Color Hash:#6ce083

Other Hashes

Crop Resistant:42330065653161a5,0101014949410141,116161657171c121

Scan History

Scan history not available

Unable to load historical scan data