Security Scan Report: bratwurstdeluxe.de

Site favicon
Submitted: Oct 9, 2026, 12:25:38 PMCompleted: Oct 9, 2026, 12:26:21 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Legitimate-looking German butcher shop whose page traffic triggers CRITICAL malware/ClickFix and EtherHiding alerts and loads a multi-feed-flagged malware domain; likely compromised or serving a hidden loader.

Risk Factors (5)
CRITICAL IDS malware alerts (ClickFix, EtherHiding exfiltration) triggered by page traffic
Third-party/companion domain zvh4.com flagged as malware by two independent threat-intel feeds
Primary domain reported as a malware loader
Ethereum RPC endpoint contact (0xrpc.io) matching EtherHiding technique
Very new domain (33 days old) with no ranking
Domain age information unavailable

Details

Page Title

Startseite - Bratwurst Deluxe

Scan Type

public

Domain Name Analysis

Domain 'bratwurstdeluxe.de' uses the German country-code top-level domain (.de) with no subdomain. The core label 'bratwurstdeluxe' covers 15 characters holding five vowels versus 10 consonants. Tokenizing the label suggests two words: bratwurst, deluxe. Median word length is 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bratwurstdeluxe.de

Page Load Overview

4.84s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:2,893 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software35% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
35%
corporate
35%
e-commerce shopping
34%
adult content
32%
finance banking
31%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3085.13.147.29Germany
AS34788Neue Medien Muennich GmbH
29146.19.24.104Poland
AS201814MEVSPACE sp. z o.o.
29188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
883--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T180E3A5F11D1C34E66B67AA5D2024E2681E3DD30DC9438AE8B25E9E7C97DDDD10CD228E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:vRdkVR1lXD1xGA6/AhAJ4A1VvAuzKR2I+YTK7e3fUh2IGP+rjL8A/fAeAx/ANMIv:vRdslDPKTc+m/TK7esATamtY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:154534:i6UQhiojGgAJUEoxiAgE4nJrNSjMBQSCxUrYCEIKsgChEAjQLgwzkWgkBApDSKABRxkFRQLBZhdLYayfVDQIAqgQYhAQAKRW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1800c09cbcb8b8d8
Perceptual Hash:c82521999cfae967
Difference Hash:b1c7033131313131
Wavelet Hash:1800e1bcfcf8f8f8
Color Hash:#865c2d

Scan History

Scan history not available

Unable to load historical scan data