ScanMalware.com

Security Scan Report: saturn.de

Redirected to:
https://www.saturn.de/
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d308d744-6511-4f6b-b455-7de837a9d1deDomain and IP registration (RDAP)/api/v1/rdap/d308d744-6511-4f6b-b455-7de837a9d1deHow often this domain was scanned/api/v1/domain/stats/saturn.deScan history for this domain/api/v1/domain/history/saturn.de?limit=15
This website contacted 3 IPs in 1 country across 3 domains to perform 14 HTTP transactions. The main domain is saturn.de and was registered 9 months ago.

Submitted URL: https://saturn.de

Effective URL:
https://www.saturn.de/
Redirected

The Cisco Umbrella rank of the primary domain is #299,569 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

New, low‑rank domain mimicking Saturn; likely phishing – avoid and report.

Risk Factors (4)
New domain (<90 days) impersonating a well‑known brand
Low Cisco Umbrella ranking for a brand‑named domain
Only a security verification page – no genuine site content
Presence of multiple eval() calls in JavaScript
Domain age information unavailable

Details

Page Title

Just a moment...other network

Scan Type

public

Domain Name Analysis

The domain 'saturn.de' uses the German country-code top-level domain (.de) without a subdomain. Its registrable label 'saturn' stretches across 6 characters split between 2 vowels and 4 consonants. Segmentation suggests one word: saturn. The median word length lands at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://saturn.de

Page Load Overview

0.53s
Total Load Time
407 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:380 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software73% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
73%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6172.65.247.91United States
AS13335Cloudflare, Inc.
4104.18.94.41United States
AS13335Cloudflare, Inc.
4172.65.198.86United States
AS13335Cloudflare, Inc.
143--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A4E2D723AE54132B3113C7AD7391F584A3356A019F16B3B7FA6513B48F8D19E2A7334A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:4+uFqvUWWOhAXMVk9vjaKObvDaIbgdJkpCN5KT5mHwYziA/j:wwLWsGaKObvDaIbgdJkpCNYT5mHwlwj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:34089:MiYBIICiMAAgBHlkXGAVE4pMBRG0nvBlA4RoChWARFSCNhQsgTE1DI1B0QYBQQg8wCEG0ABIY2RMBgAWRWEgQhCwyDhAbgYw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc3c7c3c3c7ff
Perceptual Hash:b138cfc4c3c666c6
Difference Hash:101c161e1e161608
Wavelet Hash:fec6c2c6c2c2c2e6
Color Hash:#c58799

Other Hashes

Crop Resistant:101c161e1e161608

Scan History

Scan history not available

Unable to load historical scan data