Security Report: www.vansbeauty.de - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ec1ba2c1-5d2b-4c9a-b33c-d67a8e7a7edb Domain and IP registration (RDAP)/api/v1/rdap/ec1ba2c1-5d2b-4c9a-b33c-d67a8e7a7edbHow often this domain was scanned/api/v1/domain/stats/vansbeauty.de Scan history for this domain/api/v1/domain/history/vansbeauty.de?limit=15

This website contacted 5 IPs in 2 countries across 5 domains to perform 88 HTTP transactions. The main domain is vansbeauty.de.

Submitted URL: https://www.vansbeauty.de

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Compromised WordPress store serving the analyst-vetted ClearFake Polygon loader and ClickFix malware chain, with corroborated malware threat-intel on the primary domain; injected casino spam. Avoid.

Risk Factors (5)

Known ClearFake ClickFix/malware kit injected into the page (roster-anchored, CRITICAL + HIGH YARA rules)

Content-malware Indicators of Compromise on the primary domain corroborated by 2 independent threat-intel feeds

Injected casino/gambling SEO spam content with outbound links unrelated to the site's stated beauty-store topic

Unranked third-party script host (www.hostingcloud.racing) plus malicious-host domain (correspondabb.com) contacted by page scripts

Compromised WordPress site (ver-e.g. 'Erstellt mit WordPress') serving third-party injected code

Domain age information unavailable

Details

Page Title

Vans Beauty – Extensions Excellence

Scan Type

public

Favicon Hash

MMH3: 1198047028

MD5: 000bf649cc8f6bf27cfb04d1bcdcd3c7

Domain Name Analysis

Within the German country-code top-level domain (.de), 'www.vansbeauty.de' is registered; it also runs on subdomain 'www'. The registrable portion 'vansbeauty' spans 10 characters holding 4 vowels versus six consonants. Tokenizing the label suggests two words: vans, beauty. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.14s

Total Load Time

878 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:41%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:4,765 chars

Detector Agreement:67%

Language mismatch: Declared as de but detected as en

Website Classification

Primary Category

gambling betting65% confidence

Type: spa

Method: ml+structural

All Detected Categories

gambling betting

65%

blog personal website

42%

entertainment media

41%

education learning

36%

adult content

36%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
20	185.30.35.24	Germany	AS48324webgo GmbH
17	23.88.70.108	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
17	142.251.127.95Google · CDN	United States	AS15169Google LLC
17	142.251.110.94Google · CDN	United States	AS15169Google LLC
17	172.67.218.28Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
88	5	-	-