Security Report: junge-sinfonie-berlin.de - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/64396994-238d-499b-b766-1a2878740605 Domain and IP registration (RDAP)/api/v1/rdap/64396994-238d-499b-b766-1a2878740605 Certificate Transparency/api/v1/ct/junge-sinfonie-berlin.de How often this domain was scanned/api/v1/domain/stats/junge-sinfonie-berlin.de Scan history for this domain/api/v1/domain/history/junge-sinfonie-berlin.de?limit=15

This website contacted 14 IPs in 2 countries across 11 domains to perform 39 HTTP transactions. The main domain is junge-sinfonie-berlin.de and was registered 14 years ago.

Submitted URL: https://junge-sinfonie-berlin.de

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Legitimate Berlin youth orchestra site appears compromised with ClearFake/EtherHiding malware: critical IDS exfil alerts, exploit-kit check-in and a multi-feed malicious script (ultraspeed.pro) loaded by the page. Do not browse.

Risk Factors

Content-malware indicator (ClearFake) on the primary domain

Multi-feed confirmed malicious third-party script (ultraspeed.pro)

Multiple CRITICAL network IDS alerts for EtherHiding exfiltration and exploit-kit check-in

Obfuscated/blockchain-based command-and-control behavior (EtherHiding)

Domain registration data shows an extremely recent registration date

Domain age information unavailable

Details

Page Title

Junge Sinfonie Berlin – Jung, begeistert, professionell und engagiert

Scan Type

public

Favicon Hash

MMH3: 242890531

MD5: b661eee925fbcca08dec624b3d065d49

Domain Name Analysis

Domain 'junge-sinfonie-berlin.de' uses the German country-code top-level domain (.de) while skipping any subdomain. The core label 'junge-sinfonie-berlin' covers 21 characters with eight vowels and eleven consonants, along with two hyphens. It segments into 5 words: junge, s, info, nie, berlin. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.45s

Total Load Time

2.8 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:2,384 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service41% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

41%

blog personal website

31%

education learning

28%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	213.133.104.76	Nuremberg, Bavaria, Germany	AS24940Hetzner Online GmbH
2	185.111.111.154	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
2	142.250.154.95Google · CDN	United States	AS15169Google LLC
2	104.18.11.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.21.6.137Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	185.111.111.157	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
2	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.154.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.10.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
39	14	-	-