Security Report: steuern-und-strafe.de - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/78ab4fb1-358f-4a64-810a-ef49af4b673a Domain and IP registration (RDAP)/api/v1/rdap/78ab4fb1-358f-4a64-810a-ef49af4b673aHow often this domain was scanned/api/v1/domain/stats/steuern-und-strafe.de Scan history for this domain/api/v1/domain/history/steuern-und-strafe.de?limit=15

This website contacted 21 IPs in 2 countries across 16 domains to perform 146 HTTP transactions. The main domain is steuern-und-strafe.de.

Submitted URL: https://steuern-und-strafe.de

Effective URL:

https://www.steuern-und-strafe.de/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Compromised WordPress page serving a ClickFix/ErrTraffic-Exvicy malware loader behind a fake Cloudflare 'Human Verification' prompt that tells Windows users to paste commands into Terminal. Confirmed by two CRITICAL YARA kits and network malware alerts.

Risk Factors (5)

Injected ClickFix / ErrTraffic-Exvicy malware loader served from the page

Fake Cloudflare 'Human Verification' overlay instructing visitors to run PowerScript via Win+X Terminal (ClickFix social engineering)

Critical IDS malware and EtherHiding exfiltration alerts tied to blockchain RPC endpoints contacted by page scripts

Primary domain and the site's own name flagged as 'clearfake' and 'unknown loader' malware in threat intelligence

Domain registered 1 day ago and no Cisco Umbrella ranking

Domain age information unavailable

Details

Page Title

Steuern und Strafe – Experten für Steuerstrafrecht

Scan Type

public

Favicon Hash

MMH3: 315776359

MD5: fdaebd5fb73c40698d2aafae752feb8e

Domain Name Analysis

You're looking at domain 'steuern-und-strafe.de' on the German country-code top-level domain (.de) and has no subdomain. The second-level label 'steuern-und-strafe' is 18 characters long containing six vowels alongside ten consonants; it also includes 2 hyphens. Word splitting yields 5 words: st, eu, ern, und, strafe. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

21.06s

Total Load Time

1.7 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:5,963 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking56% confidence

Type: spa

Method: ml+structural

All Detected Categories

finance banking

56%

government public service

52%

social media network

42%

blog personal website

31%

cryptocurrency blockchain

26%

Detected Features

Articles

Comments

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
26	168.119.1.220	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
6	13.226.244.31Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	23.197.140.194Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
6	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
6	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
6	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
6	142.251.14.102Google · CDN	United States	AS15169Google LLC
6	23.197.141.76Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
6	142.250.154.97Google · CDN	United States	AS15169Google LLC
146	21	-	-