ScanMalware.com

Security Scan Report: veeam-backup.org

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1cef1748-f971-4d0f-84c4-65f80d955dd3Domain and IP registration (RDAP)/api/v1/rdap/1cef1748-f971-4d0f-84c4-65f80d955dd3How often this domain was scanned/api/v1/domain/stats/veeam-backup.orgScan history for this domain/api/v1/domain/history/veeam-backup.org?limit=15
This website contacted 11 IPs in 3 countries across 8 domains to perform 23 HTTP transactions. The main domain is veeam-backup.org and was registered 4 months ago.

Submitted URL: https://veeam-backup.org

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Unofficial 'Veeam' download page on a 129-day-old unranked domain, flagged single-source as bumblebee malware. No forms, but the software-download lure plus malware indicator makes it unsafe; download only from veeam.com.

Risk Factors (4)
Content-malware threat-intel match (bumblebee loader) on the primary domain, single-source and unverified
Offers downloads of Veeam-branded software from an unofficial third-party domain
Injected 'ver81 mod15' keyword strings suggesting auto-generated SEO-spam content
Recent, unranked domain posing as a software distribution source
Domain age information unavailable

Details

Page Title

Download Veeam Backup and Replication

Scan Type

public

Domain Name Analysis

Domain 'veeam-backup.org' uses the non-profit oriented generic top-level domain (.org) with no subdomain. The second-level label 'veeam-backup' is 12 characters long holding 5 vowels versus 6 consonants, along with one hyphen. Segmentation suggests three words: vee, am, backup. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

@ veeam Backup Home History Guide About Us ‘© INDEPENDENT DATA PROTECTION GUIDE Veeam Backup & Replication for Free Veeam Backup & Replication is widely used to protect virtual, physical, and cloud...

Page Load Overview

1.27s
Total Load Time
4.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,863 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(99%)🇪🇸es(1%)🇩🇰da(0%)🇳🇴no(0%)

Website Classification

Primary Category

technology software57% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
57%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7103.149.169.126Amsterdam, North Holland, Netherlands
AS60781LeaseWeb Netherlands B.V.
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
352.184.215.111Azure · CLOUDBoydton, Virginia, United States
AS8075Microsoft Corporation
2104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.13.94Google · CDNUnited States
AS15169Google LLC
2150.171.109.101Azure · CLOUDUnited States
AS8075Microsoft Corporation
220.80.37.232Azure · CLOUDChicago, Illinois, United States
AS8075Microsoft Corporation
2104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
120.250.198.32Azure · CLOUDZurich, Zurich, Switzerland
AS8075Microsoft Corporation
2311--

Detected Technologies5

Open-Graph-Protocolvwebsite
100%
Bootstrapv5.3.3
50%
LiteSpeed
40%
HTTP/3
40%
jsDelivr
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T184A2A522F0E12137029345C1B615978EBAE2D54FD63E690072FE8BF90FE2C95DA27199

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:bPzRc5IG/0gIQNLIaMhJA8qnHF+lecVqgbmiCcnIM955vstU6vklcTntK5Ks6Kt/:bf0pLIaGJA8el+le2PSUnIAfIU6vklca

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:22990:JNACkVMFFKJIEQA6QCCJAAzAkWIuEzpACNMwUC7AErCNA9IcRcAScWhxHIFVYREA+QwGgokIEAGwBHDTIiABSSKCdAJAkgEQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffdf91f1f1b3ffff
Perceptual Hash:ec3993966a4b6c19
Difference Hash:4338232327671804
Wavelet Hash:bf8f81818190f8fe
Color Hash:0700b000200

Other Hashes

Crop Resistant:4338232327671804,37ce986ce1a54494,12010cba620ade5e

Scan History

Scan history not available

Unable to load historical scan data