Security Scan Report: yoga-fuer-maenner.de

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 3 domains to perform 112 HTTP transactions. The main domain is yoga-fuer-maenner.de and was registered 10 years ago.

Submitted URL: https://yoga-fuer-maenner.de

AI Security Verdict

High Risk

Confidence: 93%

9
Risk Score

Legitimate 10-year-old yoga studio site that has been compromised with an IClickFix/EtherHiding ClickFix injection: obfuscated script pulls a malware stage from an Ethereum Sepolia contract. Do not visit until cleaned.

Risk Factors (5)
Compromised legitimate-looking site serving a ClickFix/EtherHiding malware loader to visitors
Obfuscated JavaScript using constructor.constructor(atob(...)) to hide injected payload
Blockchain-based payload retrieval (Ethereum Sepolia) used to evade takedown
Critical malware IDS alerts on traffic generated by the page
Threat-feed hosts concealed inside decoded script (0xrpc.io, 1rpc.io, gateway.tenderly.co)
Domain age information unavailable

Details

Page Title

Startseite - Yoga für Männer

Scan Type

public

Domain Name Analysis

The domain name 'yoga-fuer-maenner.de' uses the German country-code top-level domain (.de) and has no subdomain. Count 17 characters in 'yoga-fuer-maenner' containing 7 vowels alongside eight consonants, plus 2 hyphens. Word splitting yields 5 words: yoga, fu, er, mae, nner. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Yoga für Startseite Yogafür Männer Übermich Blog @ Männer Yoga für Manne] | Finde heraus was Dir g

Page Load Overview

5.30s
Total Load Time
4.0 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:4,394 chars
Detector Agreement:100%

All Detected Languages

🇩🇪de(67%)🇺🇸en(33%)

Website Classification

Primary Category

adult content96% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
96%
blog personal website
86%
healthcare medical
55%
education learning
45%
corporate
35%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11081.169.145.158Germany
AS6724Strato GmbH
135.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1104.21.5.110Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1123--

Detected Technologies16

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T160F3B7B17A564835331F42DF9007320C60DBDAEAC522E2F8F6BA5029D5F5CE1379B259

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:MYn56Op9IYg3PsGrBIiiutXdGq+wqopgxVKdlSUc26mALbYU:MObg3PsGrftE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:157848:nmoMQGDjjMNCepEYDuUBAMIcUYYKgLQNIACGGAmUBCIAYZVYAwJABJwwBlBZQCoFIYRFoBAifAzVGIJAhlkHiRACoR0CAoCA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff7f4143400242
Perceptual Hash:a1da9e596121f1bc
Difference Hash:c1c1d392929ad6d6
Wavelet Hash:ffff7f4142420242
Color Hash:16e00010000

Scan History

Scan history not available

Unable to load historical scan data