Security Scan Report: offshore-storage.cc

Redirected to:
https://www.gmx.net/consent-management/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 14 IPs in 2 countries across 12 domains to perform 86 HTTP transactions. The main domain is offshore-storage.cc and was registered 10 months ago.

Submitted URL: https://offshore-storage.cc

Effective URL:
https://www.gmx.net/consent-management/
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Entry host offshore-storage.cc is corroborated as lummac2 (Lumma Stealer) malware by two feeds, then redirects off-domain to GMX. No credential or payment form on the captured page, but treat the origin domain as malicious.

Risk Factors (3)
Entry domain offshore-storage.cc corroborated as lummac2 (Lumma Stealer) malware by 2 independent feeds
Off-domain redirect from a malware-flagged host to an unrelated third-party site
HIGH-severity IDS alert for .cc TLD DNS traffic
Domain age information unavailable

Details

Page Title

GMX - kostenlose E-Mail, Cloud, Nachrichten & Freemail

Scan Type

public

Domain Name Analysis

The domain 'offshore-storage.cc' uses the .cc country-code top-level domain. The core label 'offshore-storage' covers 16 characters containing 6 vowels alongside 9 consonants, plus one hyphen. It segments into 2 words: offshore, storage. The median word length lands at 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

1 Es ist ein Fehler aufgetreten. Leider konnten wir die Einstellungen für Privatsphäre & Datenschutz nicht laden. Seite neu laden re

Page Load Overview

25.08s
Total Load Time
606 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:182 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software73% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
73%
gambling betting
63%
documentation technical
63%
government public service
52%
phishing scam
37%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8217.72.199.108Germany
AS8560IONOS SE
679.124.59.146Bulgaria
AS50360Tamatiya EOOD
623.209.208.242Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
623.36.156.229Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
6217.72.199.24Germany
AS8560IONOS SE
6217.72.199.64Germany
AS8560IONOS SE
6217.72.199.51Germany
AS8560IONOS SE
6217.72.199.120Germany
AS8560IONOS SE
6217.72.199.144Germany
AS8560IONOS SE
6217.72.199.141Germany
AS8560IONOS SE
8614--

Detected Technologies2

Nginxv1.18.0
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T104A1A4F35C11C9A11340A6E09215F32DD29AF59BEE90C8C9B6ED46107B85FEF24747E4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:xsyJuf3qFQYE2VCM7rpO97Q7vY4jC8pqINKHLcCSv8KHBv1dRG9kUaUegUpqUr5c:hQf6iYLVCM7rA97QxJ6WEzjgpz1+Hsm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4627:IAEP6ElURIiAAAQgAAAAEBgAgAEACAwQAJAQBVAEYkJEsgwgBAQCGBABAMASAAMIEQJoGAKAJEEBHlCRmAgwAAAIQAEAACQQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:81e7c7dfdfc3ffff
Perceptual Hash:b033cf6c8e1d3133
Difference Hash:238c9cb8aa8a96e0
Wavelet Hash:0046c2dec2c2dafe
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data