Security Scan Report: irfdesign.shop

Submitted: Oct 18, 2025, 2:46:56 AMCompleted: Oct 18, 2025, 2:48:08 AMpubliccompleted
Loading additional data...

Summary

This website contacted 12 IPs in 3 countries across 5 domains to perform 151 HTTP transactions. The main domain is irfdesign.shop and was registered NaN years ago.

Submitted URL: https://irfdesign.shop/shop/?layout_style=grid&column=column-5&sidebar=fullwidth&pagination=number

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

New, unranked site with hidden password fields and login forms – confirmed phishing scam.

Risk Factors
Credential harvesting on a newly registered domain
Hidden password field suggests attempt to capture passwords without user awareness
Lack of legitimate e‑commerce functionality despite presence of login forms
Unranked domain with no established reputation
Domain age information unavailable

Details

Page Title

Shop – irfdesign.shop

Scan Type

public

Language

🇮🇩

ID

(80% confidence)

Category

e-commerce shopping

(83%)

Domain Information

The domain 'irfdesign.shop' uses the commerce-oriented generic top-level domain (.shop) while skipping any subdomain. Its registrable label 'irfdesign' stretches across 9 characters split between three vowels and six consonants. Word splitting yields 3 words: i, rf, design. Expect two characters per word on average. Most frequently, 'i' shows up in English. You will also see it in Chinese (Pinyin) and Bosnian contexts. Taken together, it feels English.

Screenshot

Security scan screenshot of https://irfdesign.shop/shop/?layout_style=grid&column=column-5&sidebar=fullwidth&pagination=number

Page Load Overview

52.56s
Total Load Time
151
HTTP Requests
5
Domains
1.4 MB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

Language Code:id
Detection Confidence:80%
Script Type:Unknown
HTML Lang Attribute:id
Text Length:5,925 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping83% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
83%
documentation technical
70%
social media network
67%
technology software
62%
blog personal website
46%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19153.92.9.57Jakarta, Jakarta, Indonesia
AS47583Hostinger International Limited
12104.17.25.14United States
AS13335CLOUDFLARENET
12142.250.185.170United States
AS15169GOOGLE
12162.144.13.127United States
AS46606UNIFIEDLAYER-AS-1
12216.58.206.67United States
AS15169GOOGLE
122606:4700::6811:190eUnited States
AS13335CLOUDFLARENET
12142.250.185.234United States
AS15169GOOGLE
122606:4700::6811:180eUnited States
AS13335CLOUDFLARENET
122a00:1450:4001:82f::200aFrankfurt am Main, Hesse, Germany
AS15169GOOGLE
122a00:1450:4001:812::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
15112--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T104244AE268AC3836419323C6A419761C77DB95B7CB418990B3FCD72CDBA6FC05E6258C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:oFgdBRXkIAkYkuFk8FUqi8FqyLZdzvcsJub6XtHN67IG+QZeUl2q4BU5MxMkmyx+:ndXOlTWqi8FqyTSGlz7QP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:213496:ZAcDAcACE5EkyhKCABICWAIgIkStnCcs9SKgmiQuFIjEAANGKSIBERFgogTwErFA4BKkIwcAn8gqBiyABWYCCZxRRoEEJJIQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:2bffffc3ff0100e7
Perceptual Hash:b7d50b0fe1312fc0
Difference Hash:5260161640691d8c
Wavelet Hash:aafefec2ff0000e0
Color Hash:#53ac8d

Other Hashes

Crop Resistant:5260161640691d8c

Scan History

Scan history not available

Unable to load historical scan data