Security Scan Report: bazzaro.de

Site favicon
Submitted: Completed: publiccompleted
This website contacted 17 IPs in 2 countries across 15 domains to perform 265 HTTP transactions. The main domain is bazzaro.de and was registered 3 years 10 months ago.

Submitted URL: https://bazzaro.de

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Compromised Bazzaro WooCommerce store: primary domain flagged as LummaC2 malware by two feeds and 10 CRITICAL EtherHiding exfiltration IDS alerts plus blockchain C2 endpoints indicate active malware distribution.

Risk Factors (5)
LummaC2 malware reputation match on the primary domain (multi-source corroborated)
CRITICAL IDS alerts for EtherHiding exfiltration (10x) indicating active malware C2
Blockchain testnet RPC connections used as covert C2/exfil channel
Third-party resource linked to Vidar malware (single-source)
Unranked domain with no Cisco Umbrella reputation
Domain age information unavailable

Details

Page Title

Home base-light - Bazzaro - Vom Erzeuger zum Verbraucher

Scan Type

public

Domain Name Analysis

The domain 'bazzaro.de' uses the German country-code top-level domain (.de). The core label 'bazzaro' covers 7 characters containing three vowels alongside four consonants. Tokenizing the label suggests two words: baz, zaro. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bazzaro.de

Page Load Overview

75.25s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:19,115 chars
Detector Agreement:50%

Website Classification

Primary Category

documentation technical39% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
39%
news media journalism
33%
technology software
31%
blog personal website
31%
healthcare medical
27%

Detected Features

Login Form
Articles
Products
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25193.141.3.71Germany
AS6724Strato GmbH
15142.250.154.95Google · CDNUnited States
AS15169Google LLC
15192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
15192.0.73.2San Francisco, California, United States
AS2635Automattic, Inc
15142.251.14.95Google · CDNUnited States
AS15169Google LLC
15104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15142.250.154.94Google · CDNUnited States
AS15169Google LLC
1515.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1515.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
153.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
26517--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10342E7FA31463CFD9EF081A553823314E23A984EC555C980E7A70F6D2FF4269A077BA5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Mba9OhXYsGV3V5jiP++FYBLwcU0Bb79JBCB7m0hp+Eispyc4B2k:l9OhXYhVF5jiP+OYxwcUCpLtEispy8k

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12725:AvOPioygRQ4ZJEqDAQaViwApgiLICpIgaFAioTogAiREBxACJ7RCRhxRAQaAGCWo1QFHQ6CUUATmGhUZwINQMEiUAgIMhhcB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0101010103ffffff
Perceptual Hash:aa2ad4b525d29937
Difference Hash:2f17490757570010
Wavelet Hash:0303010103ffffff
Color Hash:#add279

Other Hashes

Crop Resistant:2f17490757570010

Scan History

Scan history not available

Unable to load historical scan data