ScanMalware.com

Security Scan Report: veeam-backup.nl

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d95a7089-bef8-4344-8a0b-3f22de55dfdbDomain and IP registration (RDAP)/api/v1/rdap/d95a7089-bef8-4344-8a0b-3f22de55dfdbHow often this domain was scanned/api/v1/domain/stats/veeam-backup.nlScan history for this domain/api/v1/domain/history/veeam-backup.nl?limit=15
This website contacted 5 IPs in 2 countries across 3 domains to perform 22 HTTP transactions. The main domain is veeam-backup.nl and was registered 2 months ago.

Submitted URL: https://veeam-backup.nl

AI Security Verdict

High Risk

Confidence: 75%

8
Risk Score

Unofficial Veeam fan/download site whose domain is flagged as a Bumblebee malware loader. No forms or script malware seen, but do not download software from it.

Risk Factors (4)
Threat intelligence flags the primary domain for a named malware family (Bumblebee loader)
Software-download offer for a commercial product hosted outside the vendor's official distribution channel
Unofficial third-party site trading on another company's product name; disclaimer of affiliation appears only in small footer text
Unranked domain with no verifiable registration history
Domain age information unavailable

Details

Page Title

Download Veeam Backup & Replication

Scan Type

public

Domain Name Analysis

The domain 'veeam-backup.nl' uses the Dutch country-code top-level domain (.nl) with no subdomain. Its registrable label 'veeam-backup' stretches across 12 characters containing 5 vowels alongside six consonants; bonus characters include 1 hyphen. Breaking it apart gives 3 words: vee, am, backup. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://veeam-backup.nl

Page Load Overview

3.44s
Total Load Time
650 KB
Total Size

Language Analysis

Primary Language

🇳🇱Dutch
Code: nl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:nl
Text Length:8,875 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software70% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
70%
corporate
35%
corporate business
33%
documentation technical
29%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6213.154.231.202Utrecht, Utrecht, Netherlands
AS12859BIT BV
4142.251.127.95Google · CDNUnited States
AS15169Google LLC
4142.250.154.94Google · CDNUnited States
AS15169Google LLC
4142.250.154.95Google · CDNUnited States
AS15169Google LLC
4142.251.110.94Google · CDNUnited States
AS15169Google LLC
225--

Detected Technologies5

Open-Graph-Protocolvwebsite
100%
Bootstrap
50%
PHPv8.3.35
40%
LiteSpeed
40%
HTTP/3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A4D2B521A4F5153B1192A6C6BA429F1B3FE2C50FCA2E1604B2ED8FF90FD7D499D0705A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:mgIIqSUrac8DRPP6pcKbof49LGmAC1K4hfu:tIIqdracQt0NNA7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28745:rIrigAIrAgA4CABFSsEICIgKhSCAECBJcgAAFAZFFOaTIgA4gQAGB1hDqgNAvh4BAhfAkABQJ1wApZFAfgQIQDAEDuSSERIw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff000e0e0e00ffff
Perceptual Hash:9313ec6c939ec293
Difference Hash:61dcdcd8dc8d170c
Wavelet Hash:ff000e0e0c00ffff
Color Hash:#e0da6c

Other Hashes

Crop Resistant:0049016969210802,dcdcd8d8dc23000f,a8b8b6b6b2b6dcd8,69a7dcdcd8d8dc27

Scan History

Scan history not available

Unable to load historical scan data