ScanMalware.com

Security Scan Report: evamehl.de

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7dc8d1cd-7ad4-4d01-b888-364f91ebb5c0Domain and IP registration (RDAP)/api/v1/rdap/7dc8d1cd-7ad4-4d01-b888-364f91ebb5c0How often this domain was scanned/api/v1/domain/stats/evamehl.deScan history for this domain/api/v1/domain/history/evamehl.de?limit=15
This website contacted 15 IPs in 2 countries across 7 domains to perform 58 HTTP transactions. The main domain is evamehl.de and was registered 9 years ago.

Submitted URL: https://evamehl.de

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Real Cologne speech-therapy practice whose WordPress site has been compromised and now injects a ClickFix/EtherHiding malware loader; do not visit or click.

Risk Factors (5)
Compromised WordPress site injected with a ClickFix/EtherHiding malware loader
Second-stage payload retrieved from a smart contract on the Ethereum Sepolia test network
Obfuscated JavaScript (atob/constructor.constructor wrapper) hiding its network destinations
Loading of the malicious third-party domain zvh3.com corroborated by three threat feeds
CRITICAL malware IDS alert on the page's network traffic
Domain age information unavailable

Details

Page Title

Praxis für Logopädie Köln Bilderstöckchen - Eva Mehl

Scan Type

public

Domain Name Analysis

You're looking at domain 'evamehl.de' on the German country-code top-level domain (.de) and has no subdomain. The core label 'evamehl' covers 7 characters split between 3 vowels and 4 consonants. Word splitting yields three words: eva, me, hl. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://evamehl.de

Page Load Overview

3.61s
Total Load Time
5.3 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:5,928 chars
Detector Agreement:100%

Website Classification

Primary Category

blog personal website41% confidence
Type: spa
Method: ml+structural

All Detected Categories

blog personal website
41%
education learning
26%
corporate
25%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1681.169.145.149Germany
AS6724Strato GmbH
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
3172.217.114.4Google · CDNUnited States
AS15169Google LLC
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
3172.217.117.4Google · CDNUnited States
AS15169Google LLC
3104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.175.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.217.113.4Google · CDNUnited States
AS15169Google LLC
3172.217.115.4Google · CDNUnited States
AS15169Google LLC
3172.217.116.4Google · CDNUnited States
AS15169Google LLC
5815--

Detected Technologies13

X-UA-Compatible
100%
WordPressv5.9.20
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.6.0
100%
MySQL
50%
UNIX
40%
PHPv8.4.27
40%
Diviv4.7.7
40%
Apache HTTP Serverv2.4.69
40%
Yoast SEOv18.2
30%
jQuery Migrate
20%
Google Maps
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T106C33A7D11643A2AF92B8182F561BB0DA123D76BEE0118BCFBF92444E7CDDF850A546C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:glqL5kx6QFap/miM58G/5mRJqfjFgb02Fb8uMFcBYMpey/3wxwgwL7fRk/qka2Ir:glqL5kMNhmiw2AQaFQr67fhGN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:121657:TuOESQIIAAswJCiUEIvSgSICwiAhEG9SIcCdECJgEAE0HpIbARQKDE4OLCKUGEKRDBtYhiGwGZSGCIsEECAGAAhQoCGSpBNX

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffff00000000
Perceptual Hash:aad50977d29f6092
Difference Hash:e1e1a1610d0735b3
Wavelet Hash:ffffffff00000000
Color Hash:060060000c0

Other Hashes

Crop Resistant:e1e1a1610d0735b3,73c1c8c6ea0c0697,c098e8e4f0fcfcfa,594d85157565b4a9,8c1fa7865d719be3,dcd2a6efca1979e7

Scan History

Scan history not available

Unable to load historical scan data