Security Report: zonta-schwaebisch-gmuend.de - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2ac43025-aabd-4aa6-98a6-d6ba7afcbb29 Domain and IP registration (RDAP)/api/v1/rdap/2ac43025-aabd-4aa6-98a6-d6ba7afcbb29How often this domain was scanned/api/v1/domain/stats/zonta-schwaebisch-gmuend.de Scan history for this domain/api/v1/domain/history/zonta-schwaebisch-gmuend.de?limit=15

This website contacted 29 IPs in 2 countries across 20 domains to perform 71 HTTP transactions. The main domain is zonta-schwaebisch-gmuend.de.

Submitted URL: https://zonta-schwaebisch-gmuend.de

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Legitimate-looking German Zonta club page whose scripts pull blockchain RPC payloads with CRITICAL EtherHiding/ClickFix malware IDS alerts and a malware-loader threat-intel hit on its own domain — treat as a compromised site serving malware; do not visit.

Risk Factors (5)

CRITICAL network IDS malware alerts (EtherHiding exfiltration, ClickFix domain) against traffic from this page

Page loads scripts connecting to multiple blockchain RPC nodes, the delivery channel used by EtherHiding/ClickFix loaders

Primary domain zonta-schwaebisch-gmuend.de reported as a malware loader by threat intelligence

Third-party script host bi.25space.com (unranked) with sendBeacon traffic and the site's 'Powered by 25Space.com' footer — likely injection vector for the blockchain malware scripts

Threat-intel matches on loaded resources: checkyoubrowse.codes (malicious host, 2 feeds), 178.16.52.101:443 (exploit kit clearfake)

Domain age information unavailable

Details

Page Title

Home - Zonta Club Schwäbisch Gmünd e.V.

Scan Type

public

Favicon Hash

MMH3: 1737065643

MD5: dd595981270dc3f63d0081875bd442e5

Domain Name Analysis

The domain 'zonta-schwaebisch-gmuend.de' uses the German country-code top-level domain (.de) without a subdomain. The registrable portion 'zonta-schwaebisch-gmuend' spans 24 characters split between seven vowels and 15 consonants; it also includes two hyphens. Breaking it apart gives seven words: zonta, schwa, eb, isch, g, mu, end. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

31.65s

Total Load Time

2.5 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:3,585 chars

Detector Agreement:60%

Website Classification

Primary Category

corporate70% confidence

Type: spa

Method: structural

All Detected Categories

corporate

70%

news/blog

40%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	165.22.17.181	Frankfurt am Main, Hesse, Germany	AS14061DigitalOcean, LLC
2	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	165.245.252.74	Frankfurt am Main, Hesse, Germany	AS14061DigitalOcean, LLC
2	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
2	142.251.156.4Google · CDN	United States	AS15169Google LLC
2	104.248.101.62	Frankfurt am Main, Hesse, Germany	AS14061DigitalOcean, LLC
2	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
2	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
71	29	-	-