ScanMalware.com

Security Scan Report: tavor-band.de

Submitted: Sep 14, 2026, 11:47:36 AMCompleted: Sep 14, 2026, 11:48:12 AMpubliccompleted

Summary

This website contacted 29 IPs in 2 countries across 19 domains to perform 2 HTTP transactions. The main domain is tavor-band.de and was registered 10 years ago.

Submitted URL: https://tavor-band.de

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Established band site appears COMPROMISED: primary domain flagged as LummaC2 malware, 17 critical EtherHiding C2 alerts, and a fake CAPTCHA that tricks users into running PowerShell commands.

Risk Factors
Primary domain listed as lummac2 malware in multi-feed threat intel
Repeated CRITICAL EtherHiding exfiltration network alerts
Deceptive CAPTCHA page tricking visitors into running PowerShell commands (ClickFix)
Outbound blockchain RPC connections used as C2/exfil channel
Content-injection on a legitimate-looking site hides malicious intent
Domain age information unavailable

Details

Page Title

TAVOR Band – TAVOR – Alternative Rock aus Schleswig

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Category

documentation technical

(38%)

Domain Information

Within the German country-code top-level domain (.de), 'tavor-band.de' is registered without a subdomain. The core label 'tavor-band' covers 10 characters holding 3 vowels versus 6 consonants, notching 1 hyphen. It segments into three words: ta, vor, band. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://tavor-band.de

Page Load Overview

15.98s
Total Load Time
82
HTTP Requests
19
Domains
684 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:de
Text Length:11,110 chars
Detector Agreement:50%

Website Classification

Primary Category

documentation technical38% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
38%
news media journalism
33%
technology software
31%
blog personal website
31%
entertainment media
27%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
26172.217.208.95Google · CDNUnited States
AS15169Google LLC
2195.30.84.127Munich, Bavaria, Germany
AS5539SpaceNet AG
2192.178.183.95Google · CDNUnited States
AS15169Google LLC
2142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
23.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
234.111.175.102Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2104.18.11.59Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
235.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
215.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
8229--

Page Statistics

82
Requests
19
Unique Domains
2.3 MB
Total Size

Detected Technologies11

WordPressv7.1
100%
MetaGenerator
100%
JQueryv3.7.1
100%
Bootstrapv7.1
100%
prettyPhoto
50%
WordPress Block Editor
50%
PHP
50%
MySQL
50%
LiteSpeed
40%
HTTP/3
40%
Gutenberg
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A63207FE35863CFE4EE085AA13523318952A9C5DD3558890F3671F2C2FF4209B476BA5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:tebi8hXYsGV3V5jiP++FYBLwcU0Bb79JBCBgRFjc:sbi8hXYhVF5jiP+OYxwcUCpFRFjc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11099:BfoIQCgGQBgNAIRJIdACDGQSQhAzDBoTCIUC4bSAEAVJRBgREBg4hyW7CRgJBBhQY1AFgcMIGRr0FYiQTIQ4GiAMA0KgVBHI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0101010103ffffff
Perceptual Hash:aa2ad2b52ada992d
Difference Hash:374b230757570010
Wavelet Hash:0301030103ffffff
Color Hash:#1f9331

Other Hashes

Crop Resistant:374b230757570010

Scan History

Scan history not available

Unable to load historical scan data