Security Scan Report: melanie-altbuerger.de

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 3 countries across 3 domains to perform 65 HTTP transactions. The main domain is melanie-altbuerger.de and was registered 5 years ago.

Submitted URL: https://melanie-altbuerger.de

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate German coaching site that has been compromised: obfuscated IClickFix/EtherHiding JavaScript loads malware from blockchain contracts, confirmed by an analyst-vetted kit match and a critical ET MALWARE IDS alert.

Risk Factors (5)
Compromised page injecting a ClickFix/EtherHiding malware loader via obfuscated JavaScript
Malicious script fetches its payload from Ethereum smart contracts and unknown RPC endpoints hidden by obfuscation
Critical network IDS malware alert on traffic from the page
Domain flagged as hosting stealer malware (single-source threat intel)
Delivers Windows malware stage to visitors of an otherwise legitimate-looking German coaching site
Domain age information unavailable

Details

Page Title

Melanie Altbürger Coaching & Beratung – Coaching & Beratung

Scan Type

public

Domain Name Analysis

Within the German country-code top-level domain (.de), 'melanie-altbuerger.de' is registered while skipping any subdomain. The core label 'melanie-altbuerger' covers 18 characters containing eight vowels alongside 9 consonants, notching one hyphen. Breaking it apart gives 5 words: melanie, alt, bu, e, rger. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Privatsphäre-Einstellungen Wir verwenden Cookies und ähnliche Technologien auf unserer Website und verarbeiten personenbezogene Daten von dir (2.8. IP-Adresse), um z.B. Inhalte und ‚Anzeigen zu perso...

Page Load Overview

8.02s
Total Load Time
3.9 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:4,909 chars
Detector Agreement:100%

All Detected Languages

🇩🇪de(99%)🇸🇪sv(1%)

Website Classification

Primary Category

social media network81% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
81%
technology software
60%
download file sharing
48%
blog personal website
32%
adult content
29%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6381.169.145.95Germany
AS6724Strato GmbH
21104.21.5.110Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1146.19.24.104Poland
AS201814MEVSPACE sp. z o.o.
653--

Detected Technologies10

WordPressv7.1.3
100%
JQueryv3.7.1
100%
40%
PHPv8.4.27
40%
Elementorv4.4.0
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T117547175756394BBB92A16CB73FA1B0F71232063CF61BDA0B5E491148EC4EF522D221E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:UYx77bynjlWaAStpvuUhgAPWtJPL/5tqjh9cX/TlHnbdyvMSW7M1jl6Fh5y+DFmh:U6STpvuUhgAPWtJPL/5tLRSWQ1Zv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:286244:MMQGmQzJOGARBgzIZBCA5IsEAoxwVro0MgNAoqZIAgggloCSBAJRDSIEYE5cJkB0uIgMJtUIImCIDXYZk3HCow2MEM0wBMkR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181818003c00
Perceptual Hash:cdcd3232619636cd
Difference Hash:b0323232322ab232
Wavelet Hash:c0b8b8b83b27bd81
Color Hash:07600000c00

Scan History

Scan history not available

Unable to load historical scan data