Security Scan Report: blog.clanfamily.de

Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 2 countries across 2 domains to perform 136 HTTP transactions. The main domain is clanfamily.de.

Submitted URL: https://blog.clanfamily.de

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Legitimate German family blog, but HTML carries an analyst-vetted ClearFake blockchain-contract loader and the domain is flagged as a malware loader; site appears compromised. Avoid interaction.

Risk Factors (4)
Analyst-vetted ClearFake Polygon contract loader (EtherHiding) injection detected in page HTML
Primary domain flagged as malware loader by threat intelligence
Site appears compromised: injected casino/betting SEO spam in many languages unrelated to its family-blog topic
Obfuscated/loader-style JavaScript reported by network IDS heuristics
Domain age information unavailable

Details

Page Title

Clanfamily.de - die Freizeitpark & Familienfreizeit Blogger

Scan Type

public

Domain Name Analysis

Domain 'blog.clanfamily.de' uses the German country-code top-level domain (.de) with subdomain 'blog'. The core label 'clanfamily' covers 10 characters split between 3 vowels and 7 consonants. Breaking it apart gives 2 words: clan, family. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://blog.clanfamily.de

Page Load Overview

8.48s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:11,357 chars
Detector Agreement:80%

Website Classification

Primary Category

entertainment media83% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
83%
corporate
35%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
685.44.111.93Germany
AS8648dogado GmbH
68161.156.47.59United States
AS36351IBM Cloud
1362--

Detected Technologies15

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18174D8E1396A343E424F72CF70059B1D22C79665DB4212E173BE6278AB73FD07A97218

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:lNNtAh9ev0bE5/iZyVNm/M5gV8YyX8iDtcJOnP+pNnmb8XyC00QlGHtYXLiaujYn:Ih980wzYyBtcJOnP+pNmUM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:369033:BkAwoB4CCIbBwEqRATAoRFhgRC0DTKBEHARgSYALgaFoBTgyogAmUkAbMAGaBDmwAAVUADcYkk0gYkQlBBhcC4EVIkNgFqCw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe0c0808880c4
Perceptual Hash:f2a5928eb87d0167
Difference Hash:33cc86142d392d9d
Wavelet Hash:ffffe2c0809c80cc
Color Hash:#8d53ac

Scan History

Scan history not available

Unable to load historical scan data