ScanMalware.com

Security Scan Report: crystalfilehaven.com

Submitted: Sep 13, 2026, 11:47:44 AMCompleted: Sep 13, 2026, 11:48:41 AMpubliccompleted

Summary

This website contacted 5 IPs in 1 country across 3 domains to perform 2 HTTP transactions. The main domain is crystalfilehaven.com and was registered 17 years ago.

Submitted URL: https://crystalfilehaven.com

AI Security Verdict

High Risk

Confidence: 85%

7
Risk Score

Domain is flagged by two independent threat feeds as OSX malware. The page itself shows a legitimate-looking IT support site with no credential forms, but the corroborated malware Indicators of Compromise on the primary domain require a HIGH_RISK verdict.

Risk Factors
Primary domain flagged as malware by threat intelligence feeds
Multi-source corroborated threat-intel match on the primary domain
Domain age information unavailable

Details

Page Title

1A Daten Service Reutlingen GmbH – Mac IT Support & Community

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Category

documentation technical

(63%)

Domain Information

You're looking at domain 'crystalfilehaven.com' on the commercial generic top-level domain (.com). The core label 'crystalfilehaven' covers 16 characters containing 5 vowels alongside 11 consonants. Word splitting yields 3 words: crystal, file, haven. Median word length comes out to five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://crystalfilehaven.com

Page Load Overview

36.74s
Total Load Time
13
HTTP Requests
3
Domains
411 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:de
Text Length:6,966 chars
Detector Agreement:80%

Website Classification

Primary Category

documentation technical63% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
63%
technology software
42%
government public service
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
135--

Page Statistics

13
Requests
3
Unique Domains
426.4 KB
Total Size

Detected Technologies4

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%
jsDelivr
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EAD2F721B0E0223B605793A87B10C75D7150E11BC91A6B6DFE9DC795CBCFCE258AE81A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:CGkxZvYp5IAbxAnJrxev5FZjYfOvO98OW7WdhpCCqQGkGt:cx5YjIExAQBvOWfw9Gt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30812:AALBFTBE1GBeQgADDFOqF1AkwvFQwgwcGpkGwEJHACgBEwGmLDChnIABgmCiwGrTAULwAjjgAQAEg4tgiOhRPoCQAhjmdseg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fe1f3f7fffdfd0f0
Perceptual Hash:da855ab5c250b55e
Difference Hash:506272d2e81ea109
Wavelet Hash:3c1e1e7e1fc7c0c0
Color Hash:#7997d2

Other Hashes

Crop Resistant:506272d2e81ea109,1919343070343474

Scan History

Scan history not available

Unable to load historical scan data