ScanMalware.com

Security Scan Report: www.merkur.de

Site favicon
Submitted: Sep 27, 2026, 8:04:39 AMCompleted: Sep 27, 2026, 8:05:51 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9ba04c3e-b1ec-44b0-902c-4aadaeae365fDomain and IP registration (RDAP)/api/v1/rdap/9ba04c3e-b1ec-44b0-902c-4aadaeae365fCertificate Transparency/api/v1/ct/merkur.deHow often this domain was scanned/api/v1/domain/stats/merkur.deScan history for this domain/api/v1/domain/history/merkur.de?limit=15

This website contacted 140 IPs in 8 countries across 85 domains to perform 460 HTTP transactions. The main domain is merkur.de and was registered 14 years ago.

Submitted URL: https://www.merkur.de

The Cisco Umbrella rank of the primary domain is #138,651 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 95%

0
Risk Score

Legitimate German news site Merkur.de. Self-branded, 997-day-old domain, no credential/payment forms, no threat-intel or malware signals.

Safety Factors (5)
Self-branding matches the registered domain
Domain age 997 days old with well-established reputation
No phishing, credential-harvesting, or payment forms on page
No threat-intelligence matches against page or loaded resources
Cross-origin requests are to standard advertising/analytics domains
Domain age information unavailable

Details

Page Title

Merkur.de | News aus Politik, Sport, für Verbraucher, der Welt und aus Bayern

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.merkur.de' on the German country-code top-level domain (.de); it also runs on subdomain 'www'. The second-level label 'merkur' is 6 characters long with two vowels and four consonants. Tokenizing the label suggests one word: merkur. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.merkur.de

Page Load Overview

4.10s
Total Load Time
5.9 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:31,865 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media98% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
98%
healthcare medical
90%
news media journalism
89%
adult content
85%
social media network
80%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
43193.218.202.209Germany
AS34788Neue Medien Muennich GmbH
391.234.30.146Germany
AS34788Neue Medien Muennich GmbH
379.127.216.203Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
3104.26.15.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.69.44Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
335.186.238.232Google · CDNKansas City, Missouri, United States
AS396982Google LLC
323.207.210.138Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
318.66.137.229Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
323.52.181.236Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
365.9.130.101Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
460140--

Detected Technologies4

Varnish
40%
RequireJS
20%
Google Tag Manager
20%
Adform
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T132E4B53089B0063F663F7BE4E0683794E693930AEA561BD8739C42DDBBCAE531497534

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:Qf7pQluUvtl6y2VW4k+7YByprhdo5YOjN8asmCoR/bV+yUHE6GZkJ67KFC7fVwm:Qf7pGsmrUy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:667412:CCIGGkKCOUEwCQGyVXhBUeQBQBAQwCTASJwxIRk2gwBeQQYEJgGwYBARSBFEpXKAT+wKVKUQ4RJK7DSYBHOAQFKC4AqjEgrA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfffffc7838783cf
Perceptual Hash:bcc3c33ec1c1cb31
Difference Hash:1e2e00163e3e3e1e
Wavelet Hash:c783ff8383838387
Color Hash:#a787c5

Other Hashes

Crop Resistant:1e2e00163e3e3e1e,b0f8586819313132,0101414141010101,5c485959595a5bc7,898261b93929c961

Scan History

Scan history not available

Unable to load historical scan data