Security Scan Report: xn--sakugavrskeks-hfb.ee

Site favicon
Submitted: Completed: publiccompleted
This website contacted 28 IPs in 2 countries across 14 domains to perform 103 HTTP transactions. The main domain is xn--sakugavrskeks-hfb.ee and was registered 4 years 8 months ago.

Submitted URL: https://xn--sakugavrskeks-hfb.ee

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Punycode lookalike of the Saku brewery serving a campaign page; primary domain carries a single-source malware (iclickfix) threat-intel report and mimics the Saku brand on a non-official host. No forms, but malware tag plus impersonation warrants caution.

Risk Factors (3)
Content-malware Indicator of Compromise on the primary domain (single-source, unverified)
Brand mimicry of Saku on a non-official, punycode/homograph-style domain
Multiple redirect hops to reach the landing page
Domain age information unavailable

Details

Page Title

Saku – Jagame heade ideede vahel 50 000 €

Scan Type

public

Domain Name Analysis

The domain 'xn--sakugavrskeks-hfb.ee' uses the Estonian country-code top-level domain (.ee) while skipping any subdomain. Its registrable label 'xn--sakugavrskeks-hfb' stretches across 21 characters holding 4 vowels versus 14 consonants; it also includes three hyphens. Splitting it apart reveals 9 words: xn, s, a, kuga, vrs, ke, ks, h, fb. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xn--sakugavrskeks-hfb.ee

Page Load Overview

2.52s
Total Load Time
15.6 MB
Total Size

Language Analysis

Primary Language

🇪🇪ET
Code: et
Confidence:42%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,814 chars
Detector Agreement:75%
Language mismatch: Declared as en-US but detected as et

Website Classification

Primary Category

entertainment media30% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22217.146.69.38Estonia
AS49604Zone Media OU
3142.251.20.97Google · CDNUnited States
AS15169Google LLC
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
3216.239.34.36Google · CDNUnited States
AS15169Google LLC
3142.251.157.4Google · CDNUnited States
AS15169Google LLC
3142.250.154.94Google · CDNUnited States
AS15169Google LLC
3142.251.154.4Google · CDNUnited States
AS15169Google LLC
3142.251.155.4Google · CDNUnited States
AS15169Google LLC
3142.251.151.4Google · CDNUnited States
AS15169Google LLC
3142.251.156.4Google · CDNUnited States
AS15169Google LLC
10328--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12F73C72A52F598F729BA938C9C4E62346655F511DB0EE3FAF09DC114D388D9A0CB370E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:BnWYfD5OhTZH+b0SZdypa9a8LWWkVVn4clTV5AtJ+b0vLBV:Bnhfsd+ypULWWkV+SV5AtRV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:80642:uCw1o4QCaAhwdBREyIICQ1FmkAkQWDBMgJlASIeAMuAQmNAAgQZIpTCJPGNEAACY0EqBEUkgYDhdQgNABZhpoGCoiCEABYai

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00440440000404
Perceptual Hash:92b98ecfad92e0e0
Difference Hash:66999c9ccaa5cdcc
Wavelet Hash:ff404e0e62747c4e
Color Hash:#2dd2b4

Scan History

Scan history not available

Unable to load historical scan data