ScanMalware.com

Security Scan Report: ukbonn.de

Redirected to:
https://www.ukbonn.de/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0c4e9a01-8405-4dab-ad0e-380b51e37f66Domain and IP registration (RDAP)/api/v1/rdap/0c4e9a01-8405-4dab-ad0e-380b51e37f66How often this domain was scanned/api/v1/domain/stats/ukbonn.deScan history for this domain/api/v1/domain/history/ukbonn.de?limit=15
This website contacted 1 IP in 1 country across 3 domains to perform 92 HTTP transactions. The main domain is ukbonn.de and was registered 2 months ago.

Submitted URL: https://ukbonn.de

Effective URL:
https://www.ukbonn.de/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

4
Risk Score

Domain is only 14 days old, but the page appears to be the official Universitätsklinikum Bonn site with no credential/payment forms or threat-intel hits. Risk is limited to the very recent registration.

Risk Factors (1)
Domain registered only 14 days ago (VERY_NEW)
Safety Factors (4)
Page presents itself as UKB on a matching ukbonn.de domain (self-branding, not brand impersonation)
No credential, password, or payment forms — only a site search form
No Indicators of Compromise, hunting-rule matches, or network IDS alerts
Content is consistent with a legitimate German university hospital website
Domain age information unavailable

Details

Page Title

UKB | Universitätsklinikum Bonn

Scan Type

public

Domain Name Analysis

Domain 'ukbonn.de' uses the German country-code top-level domain (.de). The registrable portion 'ukbonn' spans 6 characters with 2 vowels and 4 consonants. It segments into two words: uk, bonn. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ukbonn.de

Page Load Overview

2.10s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:28,679 chars
Detector Agreement:80%

Website Classification

Primary Category

healthcare medical98% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

healthcare medical
98%
education learning
39%
corporate
35%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9287.79.3.56Cologne, North Rhine-Westphalia, Germany
AS8422NetCologne Gesellschaft fur Telekommunikation mbH
921--

Detected Technologies2

Open-Graph-Protocolvwebsite
100%
Plesk
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CF31F0E3DE50C81B5A24C5369AA7F019C37E931FD6449D90F6C8618E05E39F899B7321

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:hfauLt3cdtEBYeHqGjInH0dtEB4DdtEBw7A:RjLt3axUhfM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1682:AAAQAAAAAAgBAQAEAAAgAAAEAChCBAIIgABAAAIAAAIAAAgCkgAEIIEQAARQAEAAEQAAAAAAQAAAIAAAAAAQAgIECAAAAQAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3e5c0c0404ffff3f
Perceptual Hash:9050cfef34751c78
Difference Hash:aa98b89cac3d13b9
Wavelet Hash:104c0c0606ffff3f
Color Hash:N/A

Other Hashes

Crop Resistant:aa98b89cac3d13b9,0022828303430392,3747c3a31242a307

Scan History

Scan history not available

Unable to load historical scan data