Security Scan: Casaleo Shop

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d10a444c-6a46-4e82-a1d3-979b127e38c0 Domain and IP registration (RDAP)/api/v1/rdap/d10a444c-6a46-4e82-a1d3-979b127e38c0How often this domain was scanned/api/v1/domain/stats/casaleo-shop.de Scan history for this domain/api/v1/domain/history/casaleo-shop.de?limit=15

This website contacted 14 IPs in 2 countries across 13 domains to perform 79 HTTP transactions. The main domain is casaleo-shop.de.

Submitted URL: https://casaleo-shop.de

Effective URL:

https://www.casaleo-shop.de/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Legitimate Casaleo shop compromised with a ClickFix/EtherHiding kit: fake Cloudflare 'Human Verification' overlay pushes visitors to paste Terminal commands that install malware. Avoid interaction.

Risk Factors (5)

Injected ClickFix fake 'Human Verification' / Cloudflare-style overlay urging Windows users to paste commands into Terminal

EtherHiding loader fetching next stage from a Polygon smart contract

Obfuscated script hiding flagged hosts (polygon.gateway.tenderly.co, 1rpc.io)

Unranked third-party script host cloud-browse.codes flagged as malicious by three feeds (ek clearfake)

Primary domain casaleo-shop.de itself reported as 'iclickfix' malware (single-source, unverified)

Domain age information unavailable

Details

Page Title

Casaleo Shopother network

Scan Type

public

Favicon Hash

MMH3: -725636930

MD5: 40eb4ffd48c93baf112e066f62108616

Domain Name Analysis

You're looking at domain 'casaleo-shop.de' on the German country-code top-level domain (.de) and has no subdomain. The core label 'casaleo-shop' covers 12 characters containing 5 vowels alongside six consonants; bonus characters include 1 hyphen. Splitting it apart reveals three words: casale, o, shop. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.46s

Total Load Time

2.1 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:5,966 chars

Detector Agreement:100%

Website Classification

Primary Category

e-commerce40% confidence

Type: spa

Method: structural

All Detected Categories

e-commerce

40%

Detected Features

Products

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	138.201.74.197	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
5	213.239.210.157	Nuremberg, Bavaria, Germany	AS24940Hetzner Online GmbH
5	104.16.40.28Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
5	142.251.110.97Google · CDN	United States	AS15169Google LLC
5	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
5	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
5	142.251.156.119Google · CDN	United States	AS15169Google LLC
5	142.251.20.149Google · CDN	United States	AS15169Google LLC
5	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
79	14	-	-