ScanMalware.com

Security Scan Report: baufoerderung.de

Submitted: Sep 13, 2026, 1:47:45 PMCompleted: Sep 13, 2026, 1:48:20 PMpubliccompleted

Summary

This website contacted 8 IPs in 1 country across 2 domains to perform 1 HTTP transaction. The main domain is baufoerderung.de and was registered 21 years ago.

Submitted URL: https://baufoerderung.de

AI Security Verdict

High Risk

Confidence: 65%

7
Risk Score

Page content looks like a legitimate German building-subsidy info site, but a single-source, unverified malware (strelastealer) indicator on the primary domain forces HIGH_RISK under the content-malware escalation rule. Treat with caution.

Risk Factors
Content-malware threat-intelligence indicator (strelastealer) matched on the primary scanned domain
Domain is unranked in Cisco Umbrella (not in top 1M), so no established reputation to offset the indicator
Domain age information unavailable

Details

Page Title

Baufoerderung beantragen

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Category

corporate

(50%)

Domain Information

The domain name 'baufoerderung.de' uses the German country-code top-level domain (.de) without a subdomain. Count 13 characters in 'baufoerderung' with 6 vowels and seven consonants. It segments into 4 words: bau, foer, de, rung. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://baufoerderung.de

Page Load Overview

7.60s
Total Load Time
48
HTTP Requests
2
Domains
1.7 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:de
Text Length:7,580 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate50% confidence
Type: static
Method: structural

All Detected Categories

corporate
50%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6217.160.0.67Germany
AS8560IONOS SE
63.5.138.183Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
652.219.171.1Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
652.219.72.159Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
63.5.138.52Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
63.5.135.224Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
652.219.170.121Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
63.5.134.95Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
488--

Page Statistics

48
Requests
2
Unique Domains
2.4 MB
Total Size

Detected Technologies4

WordPressv7.1
100%
MetaGenerator
100%
PHP
50%
MySQL
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B8633B32B594E07AE79F0B7C56B5EE3CF9B89200C9466625B1EDAC3941CA1F601B730D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:npBI7bb1jjITbyPtOaDSP1jshcUSEyp8VBbw:Y74byPtO/jshi1CVBbw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:66998:GHIjFDQwC2wBECwAKYACETy6RhLFAsYACHmEAisUYgA1wGDiiBNBORQB9M4QOIAgg+SEARwJEDDgRgigIRXYACB4gEsAAgp4

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffffffffff
Perceptual Hash:9a1a1a1a1a1b1bff
Difference Hash:b131000000000000
Wavelet Hash:0000ffffff030101
Color Hash:#d2982d

Other Hashes

Crop Resistant:b131000000000000,8200828282820082,3046b1b1b1b14630

Scan History

Scan history not available

Unable to load historical scan data