ScanMalware.com

Security Scan Report: celler-spiesser.de

Site favicon
Submitted: Sep 21, 2026, 5:47:25 PMCompleted: Sep 21, 2026, 5:47:49 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Content is a legitimate-looking Celle catering site, but a critical EtherHiding malware alert, blockchain RPC C2 traffic, malformed loaded resource and stealer Indicators of Compromise indicate the host is compromised and serving malware.

Risk Factors
EtherHiding-style malware communication over Ethereum Sepolia RPC endpoint
Critical Suricata malware/network-trojan alert on the page
Primary domain matches a stealer-malware Indicator of Compromise report
External domain qaz0.com loaded by the page matches multi-feed malware reports
Very new domain (19 days) with no reputation ranking
Domain age information unavailable

Details

Page Title

Celler Spießer

Scan Type

public

Domain Name Analysis

Domain 'celler-spiesser.de' uses the German country-code top-level domain (.de) without a subdomain. Count 15 characters in 'celler-spiesser' with 5 vowels and 9 consonants; it also includes 1 hyphen. It segments into 4 words: cell, er, spies, ser. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://celler-spiesser.de

Page Load Overview

4.46s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:2,601 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1481.169.145.152Germany
AS6724Strato GmbH
14104.26.13.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
423--

Detected Technologies8

WordPressv7.1
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
UNIX
40%
Lightbox
20%
Complianz
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10143B73893B879F72EFA935DB98FA1744284BA019B1BE3F7B059D154508C65708B2F0E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:HPmqQmsSGDjAxnlhDhTWYfD5OhTmJZJ2p+b0eJQJuZdypa9rtD0IuxF:w5kxthfsfiypj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:55240:SIogRABSOYhsQCHADQTCCmBuFRWBTQAjxyxC4II6QYDgKADsowkgdEaChRACKQHIDMJgAmGCooGEVZkAABIQGYlDgBMIhCVA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00083f1f3e381c0f
Perceptual Hash:8c3d6a4a35b4ce33
Difference Hash:f1f176766ee1f5f9
Wavelet Hash:00103f1f3e781f3f
Color Hash:#ac535f

Other Hashes

Crop Resistant:9119e7cd813d0101,3d79f2f2e4ecd1e6,3efbd230b3d39387,b6bc3c8cd0f099c8,f1f176766ae1f4f8

Scan History

Scan history not available

Unable to load historical scan data