ScanMalware.com

Security Scan Report: megamaleri.se

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d60612f9-3515-434a-beda-ad995f894d8fDomain and IP registration (RDAP)/api/v1/rdap/d60612f9-3515-434a-beda-ad995f894d8fHow often this domain was scanned/api/v1/domain/stats/megamaleri.seScan history for this domain/api/v1/domain/history/megamaleri.se?limit=15
This website contacted 9 IPs in 2 countries across 3 domains to perform 66 HTTP transactions. The main domain is megamaleri.se and was registered 2 years 7 months ago.

Submitted URL: https://megamaleri.se

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Genuine-looking Swedish painting site whose primary domain is corroborated as ClearFake malware by two feeds; scripts query Binance Smart Chain testnet RPCs, matching the ClearFake on-chain payload-delivery technique. Likely compromised — avoid.

Risk Factors (3)
Content-malware threat-intel match (ClearFake) corroborated by two independent feeds against the primary domain
Blockchain RPC network sinks hidden in page scripts matching the ClearFake/EtherHiding delivery pattern
Domain unranked in Cisco Umbrella (weak prior only)
Domain age information unavailable

Details

Page Title

Mega Måleri

Scan Type

public

Domain Name Analysis

Within the Swedish country-code top-level domain (.se), 'megamaleri.se' is registered without a subdomain. The core label 'megamaleri' covers 10 characters split between five vowels and 5 consonants. Segmentation suggests 3 words: mega, maler, i. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://megamaleri.se

Page Load Overview

4.46s
Total Load Time
9.2 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv-SE
Text Length:5,674 chars
Detector Agreement:67%

Website Classification

Primary Category

real estate property95% confidence
Type: spa
Method: ml+structural

All Detected Categories

real estate property
95%
documentation technical
93%
corporate business
87%
social media network
85%
government public service
84%

Detected Features

Search
Articles
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1046.30.215.32Copenhagen, Capital Region, Denmark
AS51468One.com A/S
7142.251.14.95Google · CDNUnited States
AS15169Google LLC
73.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
752.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
73.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
7142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
7104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7192.178.183.94Google · CDNUnited States
AS15169Google LLC
669--

Detected Technologies6

WordPressv7.1.3
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
Varnish
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DE1407217E572836312F12DF9053330C90C79FE6D952AAE5B2FE91244BB5CD037A366A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Kq5q5GCzaDoo6GgibvbLDcoDDCI4PWGohn3xJDXXNA18P1G8vpd:o5GCzaUrG3soDyPWL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:204431:qojCSxh1BIEBAQYEET8CFQmiD6KSoomZYhyIoYIIJAA/AjSjgBSBEgcFFUcUSoRCQ8V4MKsEAEQBh9I4SgAiGgAsCCAuAooS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ff8fdfff730000
Perceptual Hash:b9da6d47161e2d30
Difference Hash:6312383c8cc35297
Wavelet Hash:00ffcfcfff630000
Color Hash:#862d67

Other Hashes

Crop Resistant:6312383c8cc35297,0125d5cece334501,ada532f3992a141c,49d99232656565ad,5148343232324c51

Scan History

Scan history not available

Unable to load historical scan data