Security Scan: IG Schülertransport A3

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/47e80666-d1c7-4b65-9375-9e42ef0b522d Domain and IP registration (RDAP)/api/v1/rdap/47e80666-d1c7-4b65-9375-9e42ef0b522d Certificate Transparency/api/v1/ct/ig-schultransport-a3.ch How often this domain was scanned/api/v1/domain/stats/ig-schultransport-a3.ch Scan history for this domain/api/v1/domain/history/ig-schultransport-a3.ch?limit=15

This website contacted 8 IPs in 2 countries across 7 domains to perform 37 HTTP transactions. The main domain is ig-schultransport-a3.ch and was registered 3 months ago.

Submitted URL: https://ig-schultransport-a3.ch/

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate-looking Swiss school-transport site whose domain now serves the DarkSword iOS exploit kit (Coruna wallet stealer) via flagged third-party scripts — confirmed by kit roster and CRITICAL exploit-kit IDS alerts. Do not visit.

Risk Factors (5)

Known malicious exploit kit (DarkSword iOS / Coruna wallet stealer) delivered from this domain — analyst-vetted kit roster match

CRITICAL network IDS exploit-kit landing/loader/module alerts

Third-party scripts loaded from multiple domains flagged as malware (apiforxwork.com/.net, translatevv.com) reported under APT UNC6691-1

Beacons to suspicious .icu domains and external IP-check service indicative of anti-analysis / victim screening

Legitimate aged WordPress site appears compromised and weaponised for drive-by exploit delivery

Domain age information unavailable

Details

Page Title

IG Schülertransport A3

Scan Type

public

Favicon Hash

MMH3: 530492348

MD5: dcab89b8e04bf53fcd7f6a44a8cb4fae

Domain Name Analysis

Domain 'ig-schultransport-a3.ch' uses the Swiss country-code top-level domain (.ch) and has no subdomain. The core label 'ig-schultransport-a3' covers 20 characters split between five vowels and twelve consonants; bonus characters include one digit and 2 hyphens. Splitting it apart reveals six words: ig, s, chul, transport, a, 3. Average segment length settles at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.10s

Total Load Time

1.2 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:1,741 chars

Detector Agreement:100%

Website Classification

Primary Category

forum community discussion57% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

forum community discussion

57%

government public service

51%

education learning

43%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	193.138.29.105	Switzerland	AS208378BIG IT AG
4	142.251.110.95Google · CDN	United States	AS15169Google LLC
4	172.67.187.123Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.21.32.211Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.16.184.241Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.16.185.241Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
37	8	-	-