Security Scan Report: praxis-garm-deutschmann.de

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 6 domains to perform 56 HTTP transactions. The main domain is praxis-garm-deutschmann.de and was registered 2 years 11 months ago.

Submitted URL: https://praxis-garm-deutschmann.de

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Legitimate dental practice page, but CRITICAL IDS EtherHiding-exfil alert plus blockchain RPC traffic and a multi-feed malware domain (qaz0.com) indicate the site is compromised and serving malware. Avoid.

Risk Factors (4)
CRITICAL IDS malware alert for EtherHiding exfiltration
Blockchain RPC (tenderly.co) traffic indicating EtherHiding-style C2/payload retrieval
Multi-feed malware-listed third-party domain (qaz0.com) loaded by the page
Domain itself reported in threat-intel as RAT-related
Domain age information unavailable

Details

Page Title

Zahnarztpraxis Dentaneum 32/20 Garm & Deutschmann Wernigerode

Scan Type

public

Domain Name Analysis

You're looking at domain 'praxis-garm-deutschmann.de' on the German country-code top-level domain (.de) while skipping any subdomain. Its registrable label 'praxis-garm-deutschmann' stretches across 23 characters split between 6 vowels and 15 consonants; it also includes two hyphens. Breaking it apart gives four words: praxis, garm, deutsch, mann. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Y WWILLKOMMENTAURLUNSERERIWEB SITE] Furgeinyleachelnacdas WOnviienzentkomnits Herzlich, Willkommen inunserenZahnarztpraxis in, Wernigeroden in dernwir,Sie kompetent. zu allen Fragen rund um lnre:...

Page Load Overview

44.46s
Total Load Time
5.6 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:8,123 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical66% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

healthcare medical
66%
technology software
50%
corporate
35%
blog personal website
26%
news/blog
20%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7142.251.157.119Google · CDNUnited States
AS15169Google LLC
781.169.145.77Germany
AS6724Strato GmbH
7188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
735.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
7142.251.156.119Google · CDNUnited States
AS15169Google LLC
7142.251.154.119Google · CDNUnited States
AS15169Google LLC
7142.251.14.94Google · CDNUnited States
AS15169Google LLC
7192.178.183.94Google · CDNUnited States
AS15169Google LLC
568--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10DD20973919A2CD37F4D8BA8E3E2B32C5644A6015613B77771F8325C54289FB00A7A6F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:BcUldUqQm0PIlGDzHz8CMe9ihpPyEXaasXg72Lr/ZdSZUaAhDkWs5R:BcEmqQmsSGDjAxBaaQXZdypaRs5R

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28538:zOCAIlBggVYKATGhJVAQIJEVE2EsADrImUAEAkIABhdgqxkMB4UwETicAGLIGgMtwERSCUyQ0pDBAUeQ4IK8EANyRkigYWgi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0013300030ffffff
Perceptual Hash:ce24b51b6e314f4a
Difference Hash:74f5e52565c17127
Wavelet Hash:0017101030ffffff
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data