Security Report: dr-bettina-tunze.de - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/16d6d842-941e-431b-8996-c2f265d0bc0d Domain and IP registration (RDAP)/api/v1/rdap/16d6d842-941e-431b-8996-c2f265d0bc0d Certificate Transparency/api/v1/ct/dr-bettina-tunze.de How often this domain was scanned/api/v1/domain/stats/dr-bettina-tunze.de Scan history for this domain/api/v1/domain/history/dr-bettina-tunze.de?limit=15

This website contacted 4 IPs in 2 countries across 5 domains to perform 64 HTTP transactions. The main domain is dr-bettina-tunze.de and was registered 1 month ago.

Submitted URL: https://dr-bettina-tunze.de

Effective URL:

https://www.dr-bettina-tunze.de/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate Leipzig medical practice whose site is compromised: an IClickFix/EtherHiding ClickFix loader (YARA + 6 critical IDS alerts) injects obfuscated scripts that fetch malware from Ethereum Sepolia. Do not visit.

Risk Factors (5)

Compromised website serving a ClickFix/EtherHiding malware loader to visitors

Injected obfuscated JavaScript (constructor.constructor(atob(...))) loading stages from Ethereum Sepolia smart contracts

EtherHiding exfiltration traffic to blockchain RPC endpoints (tenderly.co, 1rpc.io) detected by IDS

Known malicious kit (IClickFix) identified by analyst-vetted roster in the page HTML

Threat-intel flagged domains loaded as page resources: zvh3.com (iclickfix, 2 feeds)

Domain age information unavailable

Details

Page Title

Dr. med. Bettina Tunze – Fachärztin für Allgemeinmedizin und funktionelle Medizin in Leipzig

Scan Type

public

Favicon Hash

MMH3: -1292373602

MD5: dc681ec008863b6a262396fb3052fc0a

Domain Name Analysis

Domain 'dr-bettina-tunze.de' uses the German country-code top-level domain (.de). The core label 'dr-bettina-tunze' covers 16 characters holding 5 vowels versus 9 consonants, notching two hyphens. Breaking it apart gives 4 words: dr, bettina, tun, ze. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.13s

Total Load Time

9.8 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:14,073 chars

Detector Agreement:100%

Website Classification

Primary Category

news/blog40% confidence

Type: dynamic

Method: structural

All Detected Categories

news/blog

40%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
16	85.13.136.94	Germany	AS34788Neue Medien Muennich GmbH
16	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
16	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
16	172.67.175.246Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
64	4	-	-