corporate

German

The domain name 'zumgugger.ch' uses the Swiss country-code top-level domain (.ch) and has no subdomain. The core label 'zumgugger' covers 9 characters containing 3 vowels alongside 6 consonants. Tokenizing the label suggests four words: zum, gu, g, ger. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

website

contact

message

aad91e5f47a639b26bf122f49b11d557e3d18fe99e7a1b5903c802c170dfbabe

f54e85b7d28594c1f17fe7156518d7efbb13bd120b584685595c977846115f8b

6c5bc3fcc8deb280c28a5228e3adb40346efa9e67a6cf76094d29c8efcb88147

ca0880566c395bab51dc9b9f8cbdc296fe70364564bf8673d0444e9e051edb06

viewport

description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

zumgugger.ch

Abuse-C Role

Andi Herzig

ch-optimanetschweiz-1-mnt

OPT-HFCH-VPS-001


        for (const [name, value] of Object.entries({"--color-accent": "#f59e0b", "--color-bg": "#ffffff", "--color-bg-alt": "#f8fafc", "--color-border": "#e2e8f0", "--color-primary": "#ffffff", "--color-primary-dark": "#ffffff", "--color-secondary": "#64748b", "--color-text": "#1e293b", "--color-text-light": "#475569", "--color-text-muted": "#94a3b8", "--container-max": "1200px", "--container-padding": "1.5rem", "--font-family-base": "\u0027Arial\u0027, \u0027Helvetica Neue\u0027, sans-serif", "--font-family-heading": "\u0027Arial\u0027, \u0027Helvetica Neue\u0027, sans-serif", "--font-size-base": "1rem", "--font-size-lg": "1.125rem", "--font-size-sm": "0.875rem", "--font-size-xl": "1.25rem", "--radius-lg": "0.75rem", "--radius-md": "0.5rem", "--radius-sm": "0.25rem", "--spacing-lg": "1.5rem", "--spacing-md": "1rem", "--spacing-sm": "0.5rem", "--spacing-xl": "2rem", "--spacing-xs": "0.25rem"})) {
            document.documentElement.style.setProperty(name, value);
        }
    

zumgugger


// Contact form initialization
(function() {
    let turnstileWidgetId = null;
    let captchaEnabled = false;
    
    // Load CAPTCHA configuration and initialize if enabled
    async function initCaptcha() {
        try {
            const response = await fetch('/api/contact/config');
            if (!response.ok) return;
            
            const config = await response.json();
            captchaEnabled = config.captcha_enabled;
            
            if (captchaEnabled && config.captcha_site_key) {
                // Load Turnstile script
                const script = document.createElement('script');
                script.src = 'https://challenges.cloudflare.com/turnstile/v0/api.js';
                script.async = true;
                script.defer = true;
                script.onload = function() {
                    // Render the widget
                    const container = document.getElementById('captcha-container');
                    if (container && window.turnstile) {
                        turnstileWidgetId = turnstile.render(container, {
                            sitekey: config.captcha_site_key,
                            theme: 'light',
                            callback: function(token) {
                                // Token will be submitted with the form
                            }
                        });
                    }
                };
                document.head.appendChild(script);
            }
        } catch (error) {
            console.debug('CAPTCHA config not available');
        }
    }
    
    // Initialize CAPTCHA on page load
    initCaptcha();
    
    // Contact form handling
    document.getElementById('contact-form')?.addEventListener('submit', async function(e) {
        e.preventDefault();
        
        const form = this;
        const submitBtn = form.querySelector('.form-submit');
        const successMsg = document.getElementById('form-success');
        const errorMsg = document.getElementById('form-error');
        
        // Hide any previous messages
        successMsg.hidden = true;
        errorMsg.hidden = true;
        
        // Disable button
        submitBtn.disabled = true;
        submitBtn.textContent = 'Wird gesendet...';
        
        try {
            const formData = new FormData(form);
            
            // Get Turnstile token if available
            if (captchaEnabled && window.turnstile && turnstileWidgetId !== null) {
                const token = turnstile.getResponse(turnstileWidgetId);
                if (token) {
                    formData.set('cf-turnstile-response', token);
                }
            }
            
            const response = await fetch(form.action, {
                method: 'POST',
                body: formData,
            });
            
            const result = await response.json();
            
            if (response.ok && result.status === 'submitted') {
                successMsg.hidden = false;
                form.reset();
                // Reset CAPTCHA widget
                if (captchaEnabled && window.turnstile && turnstileWidgetId !== null) {
                    turnstile.reset(turnstileWidgetId);
                }
            } else {
                // Show error message (could be CAPTCHA failure)
                const errorP = errorMsg.querySelector('p');
                if (result.message) {
                    errorP.textContent = result.message;
                } else {
                    errorP.textContent = 'Es gab einen Fehler beim Senden Ihrer Nachricht. Bitte versuchen Sie es später erneut.';
                }
                errorMsg.hidden = false;
                // Reset CAPTCHA widget on error
                if (captchaEnabled && window.turnstile && turnstileWidgetId !== null) {
                    turnstile.reset(turnstileWidgetId);
                }
            }
        } catch (error) {
            const errorP = errorMsg.querySelector('p');
            errorP.textContent = 'Es gab einen Fehler beim Senden Ihrer Nachricht. Bitte versuchen Sie es später erneut.';
            errorMsg.hidden = false;
        } finally {
            submitBtn.disabled = false;
            submitBtn.textContent = 'Nachricht senden';
        }
    });
})();


Requests	IP Address	Location	AS Autonomous System
10	185.66.108.95	Switzerland	AS200713Zettaplan AG
10	1	-	-

Security Scan Report: zumgugger.ch

Summary

AI Security Verdict

High Risk

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History