Security Scan Report: julianzietlow.de

Site favicon
Submitted: Sep 19, 2026, 8:47:27 AMCompleted: Sep 19, 2026, 8:48:26 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Self-branded coaching site with no forms, but critical ET MALWARE EtherHiding IDS alert, a blockchain RPC sink, and a primary-domain RAT threat-intel match indicate malware staging.

Risk Factors (4)
Critical IDS malware alert (EtherHiding exfiltration)
Primary domain matched as RAT in threat intelligence
Blockchain RPC connection combined with EtherHiding signature
Third-party resource domain flagged as malware by two feeds
Domain age information unavailable

Details

Page Title

Julian Zietlow

Scan Type

public

Domain Name Analysis

Domain 'julianzietlow.de' uses the German country-code top-level domain (.de) with no subdomain. The second-level label 'julianzietlow' is 13 characters long holding six vowels versus seven consonants. Word splitting yields 4 words: julian, zi, et, low. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://julianzietlow.de

Page Load Overview

11.40s
Total Load Time
38.4 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:9,641 chars
Detector Agreement:75%

Website Classification

Primary Category

documentation technical46% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
46%
technology software
44%
corporate
35%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1078.47.106.3Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
8142.251.110.95Google · CDNUnited States
AS15169Google LLC
8142.251.127.97Google · CDNUnited States
AS15169Google LLC
8146.75.122.132Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
8167.235.16.100Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
8172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8104.16.249.109Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8192.178.183.94Google · CDNUnited States
AS15169Google LLC
8151.101.130.217Fastly · CDNUnited States
AS54113Fastly, Inc.
21026--

Detected Technologies12

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17FD21932D19E15827F0E9B6DF7A2B22C924495524603A7B7B0F8315C6569FFB00E3D1E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:ndUqQm0PIlGDzHz8CMe9ihpe558jP2M+rLq2Pr/ZdSZUaAhDkWlN:nmqQmsSGDjAxe5ejP2MaxDZdypaRv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:29425:AaKGCYAC9g0DRIALh5MFBGaoCwBJ7jaFQBQTwI8DB0CGk8OUZQBBCGAEAMFAA4RkIEqKNBUQpgJlCRMABywbJ6UQNwwBD1rM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff9f9f9f9f9f9ff
Perceptual Hash:e96996c496966996
Difference Hash:c81313131313430c
Wavelet Hash:7e998981d9e9f901
Color Hash:#bf7740

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data