Security Scan: Anmeldung

Summary

This website contacted 1 IP in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is login.alditalk-kundenbetreuung.de.

Submitted URL: https://www.alditalk-kundenportal.de

Effective URL: https://login.alditalk-kundenbetreuung.de/signin/XUI/?goto=https%3A%2F%2Flogin.alditalk-kundenbetreuung.de%2Fsignin%2Foauth2%2Fauthorize%3Fclient_id%3DU-621-Varnish%26response_type%3Dcode%26scope%3D%26redirect_uri%3Dhttps%3A%2F%2Fwww.alditalk-kundenportal.de%2Flogged-in-home-page%2F%26code_challenge%3DucMSASZd6JnYpuiuIQUibDLxYesRCPyzJ-WyxN-hiBQ%26code_challenge_method%3DS256%26nonce%3Dck2m1ibt0ZbX2eic16W9-st9TSVz6LxMyeusdDDDJ_S13-apxTooX3Y2qWMVKueEsIA-HD29qamjzYRNGW50mA%26state%3D2Oje4rK_LhBPRlWQFvntQYDHVmg76iHCAtcVd9_5OQkcM2iawUJatbVjX0cHXIrpT0F8thQi2xhCcs-hF1eFjw%26ui_locales%3Dde%26acr_values%3Dpassword%26acr%3Dpassword%26acr_sig%3DH5F0R0FDiQW6xumv2J5cRhup0bRtMQkeYZNGoOChsy0&realm=/alditalk&service=Login&locale=de#login/Redirected

The Cisco Umbrella rank of the primary domain is #647,694 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 85%

Risk Score

The site impersonates Alditalk, collects credentials via a login form, and is linked to a known malicious IP, indicating a high‑risk phishing operation.

Risk Factors

Brand impersonation on low‑rank domain

Credential harvesting form

Known malicious IP in infrastructure

Obfuscated JavaScript (critical score) though no malware YARA match

Safety Factors

Physical address visible on site

Legitimacy score 8/100 (very low but some positive signal)

Cross‑origin form appears to be legitimate SSO flow (no exfiltration detected)

No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 3

Domain age information unavailable