ScanMalware.com

Security Scan Report: www.wherewegrowchildcare.com

Redirected to:
https://join.worldoftanks.eu/1694773323/de/?pub_id=1119080&xid=24.2360...
Site favicon
Submitted: Aug 12, 2026, 7:50:48 AMCompleted: Aug 12, 2026, 7:52:42 AMpubliccompleted
Loading additional data...

Summary

This website contacted 6 IPs in 4 countries across 6 domains to perform 2 HTTP transactions. The main domain is join.worldoftanks.eu.

Submitted URL: https://www.wherewegrowchildcare.com/

Effective URL: https://join.worldoftanks.eu/1694773323/de/?pub_id=1119080&xid=24.236081.6659917FOF69161531835511471&sid=SIDbvxlpIGDrKENf2H7XcuEIjhIO_dZR4e5QArmBADwzJf3OsdUMqHNG8lWfrLasfWfIV-ZGSzGD40CcWezs7w0wR5vCsIeD-vzhnZ195ks9YavUmqbGDBF2E0m1y_pfXHFXjX-euXdLcoPiQ&enctid=dkmsv7wmplrf&lpsn=WOT%20WW%20LMS%20AB-ACQ%20Febriary2022%20WOTHQ-2597&foris=1&teclient=1786521075374488052&utm_source=networks&utm_medium=affiliate&utm_campaign=h4iepj9b&utm_content=1119080Redirected

AI Security Verdict

Low Risk

Confidence: 85%

3
Risk Score

The site impersonates World of Tanks, collects login credentials via a form that posts to the brand’s domain, and uses heavy redirects and obfuscated JavaScript – high‑risk phishing.

Risk Factors
Brand impersonation on mismatched domain
Credential collection form (email + passwords)
Cross‑origin form submission to brand domain
Excessive redirects (7 total, 4 cross‑domain)
Highly obfuscated JavaScript with eval()
Safety Factors
Top-ranked domain (Cisco Umbrella #0, 1922 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 8 to 3
Domain age information unavailable

Details

Page Title

World of Tanks – der ultimative Strategieshooter. Kostenlos spielen!

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Category

government public service

(28%)

Domain Information

You're looking at domain 'www.wherewegrowchildcare.com' on the commercial generic top-level domain (.com) with subdomain 'www'. The core label 'wherewegrowchildcare' covers 20 characters containing seven vowels alongside 13 consonants. Breaking it apart gives 4 words: where, we, grow, childcare. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.wherewegrowchildcare.com/

Page Load Overview

26.39s
Total Load Time
52
HTTP Requests
14
Domains
1.2 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:de
Text Length:7,275 chars
Detector Agreement:50%

Website Classification

Primary Category

government public service28% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

government public service
28%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12172.67.138.86Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8208.91.196.145British Virgin Islands
AS40034Confluence Networks Inc
894.237.85.247Frankfurt am Main, Hesse, Germany
AS202053UpCloud Ltd
8188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
862.212.89.90Netherlands
AS60781LeaseWeb Netherlands B.V.
8195.181.175.41Frankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
526--

Page Statistics

52
Requests
14
Unique Domains
1.5 MB
Total Size

Detected Technologies6

OneTrust
60%
Google Tag Manager
50%
Erlang
50%
Cowboy
40%
Vue.js
30%
Google Optimize
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12CE2D71446F2041115672131DEBEAEC437754A23658CED08BD8CAA40EFAEAB78DB77F4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:HZBsjBjrAyhtbgt4MiIO/5/9SLlA4255OoMYaaMYabQn:5MMO4255ObY6Yue

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:31998:4C8B6SBMSSBSSYAgICoEnanTJaSJ4EJBl4RoFEaAwQQeixCIQBxUyEwsMAgcRDoCEKacCq7lZFB6AJJQKoDQJAMAQcBUIDpS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000060f0f0d0ffff
Perceptual Hash:e0661f3deae06a91
Difference Hash:21c4c581911192aa
Wavelet Hash:0000e0f0f8d8ffff
Color Hash:#bf6e40

Other Hashes

Crop Resistant:11c4c481911192aa

Scan History

Scan history not available

Unable to load historical scan data