Security Scan Report: mikesrealestate.co.nz

Redirected to:
https://www.mikesrealestate.co.nz/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 2 countries across 10 domains to perform 83 HTTP transactions. The main domain is mikesrealestate.co.nz.

Submitted URL: https://mikesrealestate.co.nz

Effective URL:
https://www.mikesrealestate.co.nz/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Legitimate Gisborne real-estate site compromised: injected ClickFix fake Cloudflare 'Human Verification' overlay plus EtherHiding blockchain loader. Do not interact or follow the keyboard instructions.

Risk Factors (5)
Injected ClickFix 'Human Verification' social-engineering overlay on a compromised legitimate site
EtherHiding blockchain-based loader fetching next-stage payload from a smart contract
Multiple CRITICAL network IDS malware/exploit-kit alerts against page-loaded resources
Obfuscated script hiding known-attacker hosts from static view
Unranked injected third-party script domain (browse-codes-enter.beer) unrelated to the site
Domain age information unavailable

Details

Page Title

Mike's Real Estate – Mike and Samantha Leahy Licensed REAA 2008

Scan Type

public

Domain Name Analysis

Within the New Zealand country-code top-level domain (.co.nz), 'mikesrealestate.co.nz' is registered and has no subdomain. The core label 'mikesrealestate' covers 15 characters holding 7 vowels versus 8 consonants. Word splitting yields three words: mikes, real, estate. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mikesrealestate.co.nz

Page Load Overview

5.03s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-NZ
Text Length:4,084 chars
Detector Agreement:75%

Website Classification

Primary Category

real estate property96% confidence
Type: spa
Method: ml+structural

All Detected Categories

real estate property
96%
social media network
85%
government public service
55%
adult content
52%
blog personal website
51%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11173.254.30.34Phoenix, Arizona, United States
AS31898Oracle Corporation
6172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
6142.250.154.95Google · CDNUnited States
AS15169Google LLC
635.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
6178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
6142.251.14.94Google · CDNUnited States
AS15169Google LLC
6172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.21.3.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8313--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10334F987B949285C1F1F57EAE086DC78BD93E0EBE94AD66073BCB1393F105883251C29

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:69A82PMU6NZ15TcSBaB1Q0dP7+SHKCBdGZHDnc3duIXoO8GMsQoI26tHmX52SNpE:D82PMU2U1QcP7+SHKT26tHmX5vNpE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:240747:qBhBCUkASwgUAkkq4A0KAQJMYqOQUQCGQcxkGJgTQDAWoABHHa+ThEjABz7oAEI8DMUoDRsBKkGzhNCCAQaQKIC6AMCrFkCE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffdfdfdf8f8f8f8
Perceptual Hash:cab4b54db625a54a
Difference Hash:7449093929414109
Wavelet Hash:80fcf89898b8f8f8
Color Hash:#9f53ac

Scan History

Scan history not available

Unable to load historical scan data