Security Report: zhang-ramen.de - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/55574913-54e9-4c9e-a88f-83594dfb5dcb Domain and IP registration (RDAP)/api/v1/rdap/55574913-54e9-4c9e-a88f-83594dfb5dcbHow often this domain was scanned/api/v1/domain/stats/zhang-ramen.de Scan history for this domain/api/v1/domain/history/zhang-ramen.de?limit=15

This website contacted 27 IPs in 2 countries across 11 domains to perform 153 HTTP transactions. The main domain is zhang-ramen.de and was registered 3 years 6 months ago.

Submitted URL: https://zhang-ramen.de

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate Traunstein ramen restaurant site whose WordPress install is compromised: analyst-vetted IClickFix/EtherHiding loader, obfuscated contract-driven payload, critical EtherHiding IDS alert and malware-flagged xzx1.com. Do not visit.

Risk Factors (5)

Compromised WordPress site carrying a ClickFix/EtherHiding malware injection

Obfuscated JavaScript loader that resolves its payload via an Ethereum Sepolia smart contract

Obfuscated script conceals multiple threat-feed-listed RPC/gateway hosts

Third-party resource xzx1.com flagged as iclickfix malware by two independent feeds

Critical IDS alert for EtherHiding exfiltration traffic

Domain age information unavailable

Details

Page Title

Zhang Ramen - Traunstein | Das wohl beste Ramen in Traunstein

Scan Type

public

Favicon Hash

MMH3: 2135249673

MD5: 530ceace0b9addd48f9f408b7f174633

Domain Name Analysis

You're looking at domain 'zhang-ramen.de' on the German country-code top-level domain (.de) with no subdomain. Its registrable label 'zhang-ramen' stretches across 11 characters containing 3 vowels alongside 7 consonants, notching 1 hyphen. Splitting it apart reveals 2 words: zhang, ramen. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

STARTÄRÖFENUNGSZEITENWSPEISEKARTEWANFAHRT; Jetzt Bestellen ZHANG RAMEN — m ° il IN TRAUNSTEIN 7 Eröffnungswochen - kommt vorbel, wir freuen uns auf euch. Wir schätzen Ihre Privatsphäre Wir verwe...

Page Load Overview

5.20s

Total Load Time

5.1 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:4,839 chars

Detector Agreement:100%

All Detected Languages

🇩🇪de(97%)🇺🇸en(3%)

Website Classification

Primary Category

news/blog40% confidence

Type: spa

Method: structural

All Detected Categories

news/blog

40%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
79	81.169.145.151	Germany	AS6724Strato GmbH
25	142.251.150.119Google · CDN	United States	AS15169Google LLC
18	172.217.112.4Google · CDN	United States	AS15169Google LLC
9	104.18.19.62Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.18.18.62Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.251.110.94Google · CDN	United States	AS15169Google LLC
5	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.251.14.95Google · CDN	United States	AS15169Google LLC
5	104.18.22.56Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.21.5.110Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
153	27	-	-