Security Report: anti-hornhaut.de - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f6c17fb1-063a-4a7b-9c88-ea54141431d3 Domain and IP registration (RDAP)/api/v1/rdap/f6c17fb1-063a-4a7b-9c88-ea54141431d3How often this domain was scanned/api/v1/domain/stats/anti-hornhaut.de Scan history for this domain/api/v1/domain/history/anti-hornhaut.de?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 9 HTTP transactions. The main domain is anti-hornhaut.de.

Submitted URL: https://anti-hornhaut.de

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Compromised WordPress site with a roster-confirmed ClearFake EtherHiding loader and ClickFix cleanup script; the domain is also flagged as a malware loader and hosts unrelated casino SEO spam. Do not visit.

Risk Factors (6)

Known malicious ClearFake kit identified by two analyst-vetted YARA rules (CRITICAL + HIGH)

EtherHiding loader reading command servers from a Polygon smart contract

ClickFix chain / second-stage malware delivery to Windows visitors

Rival-kit cleanup script that blocks user navigation while an overlay is shown

Primary domain reported as a malware loader in threat intelligence (single-source)

Hijacked WordPress install serving unrelated multi-language gambling SEO spam

Domain age information unavailable

Details

Page Title

WordPress – Eine weitere WordPress-Website

Scan Type

public

Favicon Hash

MMH3: 1198047028

MD5: 000bf649cc8f6bf27cfb04d1bcdcd3c7

Domain Name Analysis

You're looking at domain 'anti-hornhaut.de' on the German country-code top-level domain (.de) with no subdomain. The core label 'anti-hornhaut' covers 13 characters holding 5 vowels versus seven consonants, along with 1 hyphen. Splitting it apart reveals three words: anti, horn, haut. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.