Security Report: my-coatofmanycolours.de - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/428cbd89-80d8-4b3a-b4a0-8fa220640e78 Domain and IP registration (RDAP)/api/v1/rdap/428cbd89-80d8-4b3a-b4a0-8fa220640e78 Certificate Transparency/api/v1/ct/my-coatofmanycolours.de How often this domain was scanned/api/v1/domain/stats/my-coatofmanycolours.de Scan history for this domain/api/v1/domain/history/my-coatofmanycolours.de?limit=15

This website contacted 6 IPs in 2 countries across 5 domains to perform 40 HTTP transactions. The main domain is my-coatofmanycolours.de and was registered 3 weeks ago.

Submitted URL: https://my-coatofmanycolours.de

AI Security Verdict

Confirmed Scam

Confidence: 82%

Risk Score

Legitimate-looking sewing-course WordPress site appears compromised: CRITICAL EtherHiding malware C2 alert, blockchain RPC exfil traffic, and multiple content-malware Indicators of Compromise (RAT on primary domain, iclickfix external resource). Do not interact.

Risk Factors

EtherHiding malware C2 exfiltration pattern (blockchain smart-contract abuse) confirmed by CRITICAL IDS alert

Network Indicators of Compromise: blockchain RPC domain gateway.tenderly.co contacted

Primary domain flagged as malware (RAT) in threat intelligence

External resource xaz2.com flagged as malware (iclickfix) by multiple independent feeds

Blockchain RPC traffic from an education/crafts site is anomalous — no legitimate reason for EtherHiding exfil behavior

Domain age information unavailable

Details

Page Title

Nähkurse in Tübingen – Adriana Drews

Scan Type

public

Favicon Hash

MMH3: 1198047028

MD5: 000bf649cc8f6bf27cfb04d1bcdcd3c7

Domain Name Analysis

Domain 'my-coatofmanycolours.de' uses the German country-code top-level domain (.de) while skipping any subdomain. The second-level label 'my-coatofmanycolours' is 20 characters long containing 7 vowels alongside 12 consonants, notching one hyphen. Segmentation suggests five words: my, coat, of, many, colours. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.46s

Total Load Time

1.2 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:1,012 chars

Detector Agreement:100%

Website Classification

Primary Category

education learning55% confidence

Type: spa

Method: ml+structural

All Detected Categories

education learning

55%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	142.251.14.95Google · CDN	United States	AS15169Google LLC
6	81.169.145.152	Germany	AS6724Strato GmbH
6	192.178.183.94Google · CDN	United States	AS15169Google LLC
6	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	192.178.170.95Google · CDN	United States	AS15169Google LLC
6	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
40	6	-	-