ScanMalware.com

Security Scan Report: tag-traeume.de

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/87d150fd-ba89-48ed-af2d-30eb61fc138aDomain and IP registration (RDAP)/api/v1/rdap/87d150fd-ba89-48ed-af2d-30eb61fc138aHow often this domain was scanned/api/v1/domain/stats/tag-traeume.deScan history for this domain/api/v1/domain/history/tag-traeume.de?limit=15
This website contacted 8 IPs in 2 countries across 6 domains to perform 61 HTTP transactions. The main domain is tag-traeume.de and was registered 7 years ago.

Submitted URL: https://tag-traeume.de

AI Security Verdict

Confirmed Scam

Confidence: 94%

9
Risk Score

Compromised florist site serving an EtherHiding/ClickFix loader: analyst-vetted kit match, CRITICAL IDS malware alert, obfuscated blockchain stage loader and a malicious third-party host. No forms, but visitors are at risk of malware.

Risk Factors (5)
EtherHiding/ClickFix malware loader embedded in page scripts (blockchain-hosted second stage)
Deliberate obfuscation hiding RPC/relay hosts from casual inspection
CRITICAL network IDS malware/exfiltration alert on the scanned traffic
Page loads a third-party domain (zvh3.com) corroborated as malicious by three independent threat feeds
Site appears compromised, exposing benign visitors (wedding/florist audience) to a Windows malware lure
Domain age information unavailable

Details

Page Title

TagTräume – Wo Träume war werden – Floristin & Dekorateurin für Eure Hochzeit

Scan Type

public

Domain Name Analysis

The domain 'tag-traeume.de' uses the German country-code top-level domain (.de). The core label 'tag-traeume' covers 11 characters with five vowels and five consonants, plus 1 hyphen. Breaking it apart gives four words: tag, tra, eu, me. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://tag-traeume.de

Page Load Overview

14.81s
Total Load Time
13.8 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:914 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media65% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

entertainment media
65%
documentation technical
34%
social media network
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1281.169.145.157Germany
AS6724Strato GmbH
7142.251.110.95Google · CDNUnited States
AS15169Google LLC
752.218.180.80Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
7157.240.0.174Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
7104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.250.154.95Google · CDNUnited States
AS15169Google LLC
7172.67.175.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
716.15.36.11Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
618--

Detected Technologies10

X-UA-Compatible
100%
WordPressv7.0.8
100%
MetaGenerator
100%
JQueryv3.7.1
100%
WooCommercev10.8.1
60%
MySQL
50%
UNIX
40%
PHPv8.3.36
40%
Apache HTTP Serverv2.4.69
40%
jQuery Migrate
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18244A8E1F3346066511FA31BE6BBE12C6121A902CF024595F1E5C139A3EBD54BDE2BCE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:o5knkFS8z6btFDASAQ0A1Am4AeH4JrM3JhCBwZt0yOtRCyjG:7nkFS8zRyeYxJrM3QC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:265936:7zIjBFYoCWAwA0jgIJjqAIM5CwBBXgUyhAORNABVEEBAQoCgSAUUugUEGRYSmQIhXQSAAsIAIPNkdwi+ESLAQAYQxEE08YAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff4767e4e4ff
Perceptual Hash:c08ddf42217aff81
Difference Hash:5050048c8e8d0504
Wavelet Hash:2afefe424264c0e7
Color Hash:N/A

Other Hashes

Crop Resistant:5050048c8e8d0504

Scan History

Scan history not available

Unable to load historical scan data