Security Scan Report: omtickets.de

Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 2 countries across 8 domains to perform 80 HTTP transactions. The main domain is omtickets.de and was registered 6 years ago.

Submitted URL: https://omtickets.de

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Content-malware-typed indicator of compromise (stealer) on the primary domain forces an elevated rating, but it is a single unverified source and the page itself shows no forms, exfiltration, or impersonation. Avoid entering data until the domain is cleared.

Risk Factors (2)
Primary-domain indicator of compromise typed as stealer malware (single-source, unverified community submission)
Domain not ranked in Cisco Umbrella (unranked status alone is a weak prior, not independent evidence)
Domain age information unavailable

Details

Page Title

OM Ticketshop

Scan Type

public

Domain Name Analysis

The domain 'omtickets.de' uses the German country-code top-level domain (.de). The registrable portion 'omtickets' spans 9 characters with three vowels and six consonants. Breaking it apart gives 2 words: om, tickets. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://omtickets.de

Page Load Overview

19.91s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:49%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,380 chars
Detector Agreement:100%
Language mismatch: Declared as en-US but detected as de

Website Classification

Primary Category

entertainment media98% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
98%
blog personal website
70%
government public service
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1081.169.145.165Germany
AS6724Strato GmbH
7142.251.14.97Google · CDNUnited States
AS15169Google LLC
7146.75.123.1Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
7157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
7216.239.32.36Google · CDNUnited States
AS15169Google LLC
7142.251.127.157Google · CDNUnited States
AS15169Google LLC
7142.251.110.94Google · CDNUnited States
AS15169Google LLC
7157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
7216.239.34.36Google · CDNUnited States
AS15169Google LLC
7142.251.127.154Google · CDNUnited States
AS15169Google LLC
8011--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T189E30A63A37848FA3AEB4F69494973187086D611D642A2E5F5ECC15867CCFFA00E770E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:A9XQg5Mmjx+qehFP01dewSK0q01wA2FAnA4fAUm4GmLp1TZIUgtLniMtQR3YS5wS:QQg5Mmjx+qehFP01uNAvAN1TZIUgtLnw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:150756:YDELyxC0GiwMC8YbCh0QTBBNTRyQkQQYYNIDCaKE8KBlRCUBQiQYClwABtAgoEEIUDCQCAjECAXqXBNxaP9YGBSMNhQ6MBAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:810101013d3d01f9
Perceptual Hash:aa55aad5aa778854
Difference Hash:0301110171710113
Wavelet Hash:ff0101017d7d01f9
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data