ScanMalware.com

Security Scan Report: german-track.com

Site favicon
Submitted: Oct 12, 2026, 4:18:20 PMCompleted: Oct 12, 2026, 4:19:03 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Analyst-vetted DarkSword iOS exploit kit with Coruna wallet stealer is delivered from this page, corroborated by 3 CRITICAL IDS exploit-kit alerts and a YARA body match. Treat as malicious; do not visit.

Risk Factors (5)
Known malicious exploit kit (DarkSword iOS / Coruna wallet stealer) confirmed by analyst-vetted kit roster — CRITICAL stealer
Three CRITICAL IDS exploit-kit alerts indicating live exploit-kit delivery
Six threat-intelligence domain matches tagged as malware (apt unc6691-1), single-source
Suspicious third-party domains (.icu) receive HTTP POST requests and appear in TLS SNI/DNS — likely exploit/telemetry endpoints
WordPress site showing 'critical error' with injected/third-party malicious script hosts — consistent with a compromised CMS
Domain age information unavailable

Details

Page Title

GermanTrack

Scan Type

public

Domain Name Analysis

The domain 'german-track.com' uses the commercial generic top-level domain (.com). The core label 'german-track' covers 12 characters split between 3 vowels and eight consonants, plus one hyphen. Word splitting yields 2 words: german, track. Expect 5.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://german-track.com/

Page Load Overview

4.39s
Total Load Time
3.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,948 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning80% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

education learning
80%
adult content
69%
blog personal website
62%
government public service
59%
news media journalism
46%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
723.26.237.231Haarlem, North Holland, Netherlands
AS149440Evoxt Sdn. Bhd.
7142.251.20.95Google · CDNUnited States
AS15169Google LLC
778.46.156.89Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
7104.21.32.211Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7172.67.187.123Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.16.185.241Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.16.184.241Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
639--

Detected Technologies6

WordPressv6.9.4
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
Ubuntu
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F97495F7C2813B3EB4D78459E327273CE11BE8558F43E6FA7659116163C62EE3262608

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:r4Dq01IhGduUn4VcB9HsSNLtxd8HsSNLtxd+HsSNLtxddHsSNLtxdvZ5CFPnDjVa:Iq0sqBsPnXA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:341233:QhiVIFgFSYCkBAhACGXxCmELEzTBFKSBqYyoA6CAh1aY5AABdMEA6QO0GFh+CIAEQAQFhyNRhxQwKuikCxYwSckQgACa4nHG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff1f1f1f1f1fff00
Perceptual Hash:9c87e3b061e31ce3
Difference Hash:8a76753535353cd1
Wavelet Hash:fe1e0f0f03030300
Color Hash:#352dd2

Other Hashes

Crop Resistant:8a76753535353cd1,0e626b6262f06143,4992b06932b2b208

Scan History

Scan history not available

Unable to load historical scan data