Security Scan Report: praxis-koerperquelle.ch

Submitted: Oct 11, 2026, 12:25:49 PMCompleted: Oct 11, 2026, 12:26:53 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate Swiss craniosacral therapy site that has been compromised and injected with the ClearFake blockchain malware loader and casino SEO spam; primary and linked domains are corroborated malware IoCs.

Risk Factors (5)
ClearFake blockchain-contract loader injected into the site (analyst-vetted malicious kit, YARA match)
Content-malware threat-intel match against the PRIMARY domain (clearfake), corroborated by 2 feeds
Third-party script resource triapfog.com flagged malicious by 3 feeds
Legitimate therapy-practice branding replaced/complemented by foreign online-gambling SEO spam
Page scripts fetch from the flagged unranked host waimana.ch
Domain age information unavailable

Details

Page Title

Waimana - Craniosacrale Therapie

Scan Type

public

Domain Name Analysis

Domain 'praxis-koerperquelle.ch' uses the Swiss country-code top-level domain (.ch) without a subdomain. The second-level label 'praxis-koerperquelle' is 20 characters long holding 8 vowels versus 11 consonants, plus 1 hyphen. Word splitting yields 5 words: praxis, ko, er, per, quelle. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://praxis-koerperquelle.ch

Page Load Overview

9.93s
Total Load Time
794 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de-CH
Text Length:9,488 chars
Detector Agreement:50%

Website Classification

Primary Category

gambling betting99% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
99%
entertainment media
99%
government public service
90%
download file sharing
89%
healthcare medical
84%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2777.109.176.92Zurich, Zurich, Switzerland
AS13030Init7 (Switzerland) Ltd.
26142.251.14.97Google · CDNUnited States
AS15169Google LLC
532--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B9D33A71B66E1C24063F43DBC5EBEB0C497BC5638A9145F9B5AD30084796AE0E3DA31B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:7UNNtA/9CVAN64WL86x0xm7ixISa9pZIJaTGC6jJ:5/9vN64Wx+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:138732:AJLvAC4qF4zCiOIIFBZoLThgAZzigGBlFCqJsByFUCA4U5giaElngDnRoChCQeYoAiKgiikBDUYk2RkcBi4IBVHFEQgoyNJw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc3c3c3c3c3c3df
Perceptual Hash:bcc6dbc692498669
Difference Hash:201616161606123a
Wavelet Hash:8ac2c3c3c3c383df
Color Hash:#3d783a

Other Hashes

Crop Resistant:201616161606123a

Scan History

Scan history not available

Unable to load historical scan data