Security Report: edeka-kutsche.de - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/23d2640e-e903-47f3-bfdb-2c9ef601acc2 Domain and IP registration (RDAP)/api/v1/rdap/23d2640e-e903-47f3-bfdb-2c9ef601acc2How often this domain was scanned/api/v1/domain/stats/edeka-kutsche.de Scan history for this domain/api/v1/domain/history/edeka-kutsche.de?limit=15

This website contacted 6 IPs in 2 countries across 6 domains to perform 44 HTTP transactions. The main domain is edeka-kutsche.de and was registered 9 years ago.

Submitted URL: https://edeka-kutsche.de

AI Security Verdict

High Risk

Confidence: 93%

Risk Score

Legitimate EDEKA Kutsche store site that appears compromised: an obfuscated ClickFix/EtherHiding loader pulls a second stage from an Ethereum contract and contacts malicious host zvh4.com. Do not visit.

Risk Factors (5)

Compromised site serving a ClickFix/EtherHiding malware loader to visitors

Obfuscated JavaScript with blockchain (Ethereum Sepolia) contract-based payload retrieval

Critical network IDS alerts for malware C2 and EtherHiding exfiltration

Obfuscated script hides threat-feed hosts used as RPC/gateway infrastructure

Multi-feed malicious indicator on a third-party resource loaded by the page

Domain age information unavailable

Details

Page Title

Start - EDEKA Kutsche

Scan Type

public

Favicon Hash

MMH3: -822924778

MD5: 6724c5550fecab8b819e9d93b947e9ec

Domain Name Analysis

Within the German country-code top-level domain (.de), 'edeka-kutsche.de' is registered. The second-level label 'edeka-kutsche' is 13 characters long holding 5 vowels versus seven consonants, along with 1 hyphen. Segmentation suggests four words: ed, eka, kut, sche. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.56s

Total Load Time

4.2 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:4,830 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence

Type: dynamic

Method: structural

All Detected Categories

corporate

70%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	81.169.145.86	Germany	AS6724Strato GmbH
7	172.67.157.28Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	148.251.5.29	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
7	157.240.0.174Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
7	104.26.12.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
44	6	-	-