Security Scan: nitab.de

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cef30a7c-785f-414a-87ca-22c10ea9110f Domain and IP registration (RDAP)/api/v1/rdap/cef30a7c-785f-414a-87ca-22c10ea9110fHow often this domain was scanned/api/v1/domain/stats/nitab.de Scan history for this domain/api/v1/domain/history/nitab.de?limit=15

This website contacted 6 IPs in 2 countries across 5 domains to perform 18 HTTP transactions. The main domain is nitab.de.

Submitted URL: https://nitab.de

Effective URL:

http://nitab.de/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Compromised WordPress site serving a ClearFake (EtherHiding) ClickFix loader confirmed by two roster-anchored YARA rules plus multi-feed 'wp inject' threat intel on datadock.info; gambling spam masks the malware.

Risk Factors (6)

ClearFake blockchain-based loader (EtherHiding) injected into the page — CRITICAL YARA, roster-anchored

ClearFake rival-kit cleanup script with overlay/navigation blocking — HIGH YARA, roster-anchored

Cross-origin POST exfiltration path to datadock.info, flagged 'wp inject' by 3 feeds

Primary domain flagged as malware loader

Off-topic gambling affiliate SEO spam indicating site compromise

INFO-level IDS javascript-obfuscator usage alerts corroborating script obfuscation

Domain age information unavailable

Details

Page Title

nitab.de

Scan Type

public

Favicon Hash

MMH3: 530492348

MD5: dcab89b8e04bf53fcd7f6a44a8cb4fae

Domain Name Analysis

Within the German country-code top-level domain (.de), 'nitab.de' is registered with no subdomain. Count 5 characters in 'nitab' containing 2 vowels alongside 3 consonants. Splitting it apart reveals two words: nita, b. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.29s

Total Load Time

221 KB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:49,875 chars

Detector Agreement:50%

Website Classification

Primary Category

entertainment media99% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

entertainment media

99%

gambling betting

99%

technology software

97%

cryptocurrency blockchain

92%

education learning

72%

Detected Features

Articles

Comments

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	85.13.138.51	Germany	AS34788Neue Medien Muennich GmbH
3	54.192.35.123Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	162.244.35.233	Santa Clara, California, United States	AS14576Hosting Solution Ltd.
3	192.0.77.48	San Francisco, California, United States	AS2635Automattic, Inc
3	54.192.35.119Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	146.75.122.208Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
18	6	-	-