Security Scan: salzschatz -

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/71696878-4bb8-4daa-8ceb-a147b7585ce1 Domain and IP registration (RDAP)/api/v1/rdap/71696878-4bb8-4daa-8ceb-a147b7585ce1How often this domain was scanned/api/v1/domain/stats/salzschatz.de Scan history for this domain/api/v1/domain/history/salzschatz.de?limit=15

This website contacted 25 IPs in 3 countries across 18 domains to perform 65 HTTP transactions. The main domain is salzschatz.de and was registered 1 year 1 month ago.

Submitted URL: https://salzschatz.de

AI Security Verdict

High Risk

Confidence: 93%

Risk Score

Compromised WordPress site serving ClearFake/Mordant backdoor source and an EtherHiding blockchain-based loader (BSC testnet C2). No forms, but active malware distribution.

Risk Factors (5)

ClearFake/Mordant WordPress backdoor PHP source embedded in the served page

Blockchain/EtherHiding-based payload retrieval (BSC testnet contract address resolution)

Obfuscated JavaScript hiding C2/RPC hosts tied to malware feeds

Threat-intel malware match on the primary domain (unknown loader)

Third-party wp-injection domain loaded by the page

Domain age information unavailable

Details

Page Title

salzschatz -

Scan Type

public

Favicon Hash

MMH3: 892704185

MD5: 8c6948ba6e4368e675c5b3fe45ff5c27

Domain Name Analysis

Domain 'salzschatz.de' uses the German country-code top-level domain (.de) and has no subdomain. The registrable portion 'salzschatz' spans 10 characters containing two vowels alongside eight consonants. Tokenizing the label suggests 4 words: s, a, lz, schatz. Median word length is 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

18.16s

Total Load Time

1.1 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:12,306 chars

Detector Agreement:67%

Website Classification

Primary Category

documentation technical36% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

36%

blog personal website

32%

news media journalism

31%

technology software

27%

government public service

26%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	202.61.232.193	Nuremberg, Bavaria, Germany	AS197540netcup GmbH
2	92.246.95.231	Netherlands	AS39572DataWeb Global Group B.V.
2	142.251.127.95Google · CDN	United States	AS15169Google LLC
2	185.111.111.154	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
2	5.79.75.210	Netherlands	AS60781LeaseWeb Netherlands B.V.
2	142.251.13.94Google · CDN	United States	AS15169Google LLC
2	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	35.71.129.99Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
65	25	-	-