Security Scan: Ausdrucksstarke Blumen- und Blütenbilder von

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6e7434ef-47e7-47e2-821f-0a264ef9208f Domain and IP registration (RDAP)/api/v1/rdap/6e7434ef-47e7-47e2-821f-0a264ef9208fHow often this domain was scanned/api/v1/domain/stats/xn--bltenfotografie-0vb.de Scan history for this domain/api/v1/domain/history/xn--bltenfotografie-0vb.de?limit=15

This website contacted 3 IPs in 2 countries across 3 domains to perform 91 HTTP transactions. The main domain is xn--bltenfotografie-0vb.de and was registered 11 years ago.

Submitted URL: https://xn--bltenfotografie-0vb.de

AI Security Verdict

High Risk

Confidence: 92%

Risk Score

Legitimate-looking German flower-photography site that has been compromised: analyst-vetted IClickFix/EtherHiding script and a CRITICAL malware IDS alert show it loads a ClickFix payload from a blockchain contract. Avoid.

Risk Factors (5)

Known malicious ClickFix/EtherHiding kit injected into the page (analyst-vetted kit roster match)

CRITICAL IDS malware alert indicating blockchain-based payload retrieval and exfiltration

Obfuscated JavaScript hiding blockchain RPC hosts used as a dead-drop resolver

Primary domain reported as a malware loader by threat intelligence

Compromised-site injection pattern: benign photography content with no forms, so the visitor cannot see the payload

Domain age information unavailable

Details

Page Title

Ausdrucksstarke Blumen- und Blütenbilder von Helmut Neumann

Scan Type

public

Favicon Hash

MMH3: 909032588

MD5: 49eb3d982cc17868b60beae2eadce989

Domain Name Analysis

The domain 'xn--bltenfotografie-0vb.de' uses the German country-code top-level domain (.de) without a subdomain. The registrable portion 'xn--bltenfotografie-0vb' spans 23 characters containing six vowels alongside 13 consonants; it also includes 1 digit and 3 hyphens. Tokenizing the label suggests eight words: xn, b, lten, fotogr, a, fie, 0, vb. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.81s

Total Load Time

5.6 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:43,016 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence

Type: spa

Method: structural

All Detected Categories

corporate

70%

news/blog

60%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
31	193.141.3.74	Germany	AS6724Strato GmbH
30	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
30	172.67.175.246Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
91	3	-	-