ScanMalware.com

Security Scan Report: www.dorotheum.com

Submitted: Apr 19, 2026, 7:14:30 PMCompleted: Apr 19, 2026, 7:15:12 PMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 2 countries across 3 domains to perform 1 HTTP transaction. The main domain is dorotheum.com and was registered NaN years ago.

Submitted URL: https://www.dorotheum.com/en/c/terms-and-conditions-47/

The Cisco Umbrella rank of the primary domain is #372,871 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 78%

3
Risk Score

The site appears legitimate with a long history and self‑branding; minor concerns (JS obfuscation, redirects, low ranking) keep it at low risk.

Risk Factors
Critical JavaScript obfuscation score with many eval() calls
21 consecutive redirects detected
Cisco Umbrella ranking #372,871 (outside top 100 K for a known brand)
Safety Factors
Long‑standing domain registration (1995)
Meta tags and site title match the domain (no brand impersonation)
No payment fields or hidden password fields
No cross‑origin credential submissions
No network IDS alerts or malware YARA matches
Domain age information unavailable

Details

Page Title

Terms and conditions - Dorotheum

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

social_media

(50%)

Domain Information

Within the commercial generic top-level domain (.com), 'www.dorotheum.com' is registered; it also runs on subdomain 'www'. Its registrable label 'dorotheum' stretches across 9 characters holding 4 vowels versus 5 consonants. Splitting it apart reveals three words: do, roth, eum. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.dorotheum.com/en/c/terms-and-conditions-47/

Page Load Overview

1.79s
Total Load Time
25
HTTP Requests
4
Domains
322 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:11,175 chars
Detector Agreement:100%

Website Classification

Primary Category

social_media50% confidence
Type: webapp
Method: structural

All Detected Categories

social_media
50%
forum
40%

Detected Features

Login Form
Search
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
962.218.60.207Bruck an der Mur, Styria, Austria
AS8437Hutchison Drei Austria GmbH
8142.250.154.97United States
AS8437
862.218.60.204Bruck an der Mur, Styria, Austria
AS8437Hutchison Drei Austria GmbH
253--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E014084161D9293BD11B53A63844EB84A1DF8633EE3A0EDA747FC0680FD3E66296F14D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:19rQf3/bLEEZ4wTRwTPll309kojmjPi8mR6YvDEPpQU8rCOtv:LEKl309kImjPbVYvDEtDOt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:201206:AlOCSREBphAAaA1ggFuATG4CibAKAthoUDYkBBbLyDCFJCA0LGDAEGIWDAYREcd5GJQ4MvwiDBaGBDEiGkwBBNCY4IC0AJHM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c3c3c3c3c000000
Perceptual Hash:8bcb64349b346477
Difference Hash:6969696979611d21
Wavelet Hash:3d3d3d3d3d3d0101
Color Hash:#49783a

Other Hashes

Crop Resistant:cbcbcbcbcbcbe0c7,d058631f824c4c80,6969696979611f21

Scan History

Scan history not available

Unable to load historical scan data