Security Scan Report: naturfotografie-roman-vitt.de

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 3 countries across 3 domains to perform 32 HTTP transactions. The main domain is naturfotografie-roman-vitt.de.

Submitted URL: https://naturfotografie-roman-vitt.de

AI Security Verdict

High Risk

Confidence: 88%

9
Risk Score

One-day-old hacked WordPress nature-photography site injected with hidden casino SEO spam and an AMOS ClickFix malware loader; critical IDS malware alert plus content-malware Indicators of Compromise on the primary domain. Avoid.

Risk Factors (6)
Critical IDS malware alert for AMOS ClickFix loader script delivery
Content-malware Indicators of Compromise match against the primary domain
Concealed casino/gambling SEO-spam content on an unrelated nature-photography site
Malicious third-party host (rehearsal-b.com) and suspicious .life domain loaded by the page
JavaScript obfuscation indicators plus Function() constructor code generation
Domain only 1 day old and completely unranked
Domain age information unavailable

Details

Page Title

Naturfotografie Roman Vitt

Scan Type

public

Domain Name Analysis

Domain 'naturfotografie-roman-vitt.de' uses the German country-code top-level domain (.de). The registrable portion 'naturfotografie-roman-vitt' spans 26 characters containing ten vowels alongside 14 consonants, notching 2 hyphens. Word splitting yields 7 words: natur, fotogr, a, fie, roman, vit, t. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

ROMANVITT NATUREOTOGRAFIE Einwilligung verwalten Um dir etn optimates Erlebnis zu breten, verwenden wir Technologien wie Cookies, um Geratelnformationen zu spelchern und/oder darauf zuzugreifen. We...

Page Load Overview

2.30s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:2,345 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical30% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
30%
technology software
28%
adult content
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12185.115.179.136Germany
AS204038AD IT Systems GmbH
1062.60.155.142Iran
AS203273NetCrafters OU
10172.67.171.128Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
323--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18312A5DE30D9321157731A35091A6E70DF3E84EAC2752DAAF97D863843E43AC2217F5A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:THoCJ2kTrjH3/MwMAfjpeyN5Vs4Ejl+lQlBLERwPzAXUOcLeDxkdUycLeDxkbjoX:hjj9eyN5VoBacBnSzdBI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9156:IbwGQpBGALIgARWKCQ0Y8siXAA7OwUF+AFiAQahAoKiDmA6YAIqSJAuFQLEYYoJVFgd5ACcCQxJ5DYhlrkBEQQAgQBISMOCQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7c5c183873fdf87
Perceptual Hash:bb71e085b7cc425a
Difference Hash:5c9d1b367cd6170f
Wavelet Hash:e7c1818387279f87
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data