Security Scan Report: www.stengel-immobilienservice.de

Site favicon
Submitted: Sep 13, 2026, 11:47:30 PMCompleted: Sep 13, 2026, 11:48:02 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Genuine German real-estate agency whose site appears compromised: CRITICAL IDS EtherHiding exfiltration malware, blockchain RPC calls, and a multi-feed 'clearfake' exploit-kit resource loaded. Avoid visiting.

Risk Factors (6)
CRITICAL IDS malware alert: EtherHiding exfiltration (blockchain-hosted malicious payload)
Loaded third-party domain with multi-feed malicious 'clearfake exploit kit' attribution
EtherHiding blockchain RPC / smart-contract communication from a page that has no legitimate blockchain function
Obfuscated/dynamically generated JavaScript (Function() constructor calls)
Compromised legitimate site abused to serve/deliver malware to visitors
Primary domain also reported as 'iclickfix (malware)' (single-source, unverified)
Domain age information unavailable

Details

Page Title

Stengel Immobilienservice - Immobilienmakler am Bodensee

Scan Type

public

Domain Name Analysis

Within the German country-code top-level domain (.de), 'www.stengel-immobilienservice.de' is registered, featuring subdomain 'www'. Count 25 characters in 'stengel-immobilienservice' split between ten vowels and 14 consonants, along with 1 hyphen. Segmentation suggests 5 words: stengel, im, mobil, ien, service. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.stengel-immobilienservice.de

Page Load Overview

7.12s
Total Load Time
2.7 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:6,834 chars
Detector Agreement:100%

Website Classification

Primary Category

real estate property88% confidence
Type: spa
Method: ml+structural

All Detected Categories

real estate property
88%
corporate
35%
forum
20%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18104.26.0.161Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1078.46.5.171Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
10104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1034.102.149.160Google · CDNKansas City, Missouri, United States
AS396982Google LLC
10172.217.118.4Google · CDNUnited States
AS15169Google LLC
10188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
10104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
989--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1472142A3F81ACE1F13B0DB11FCA2B228897F3A58B24E59C567D2011D57E0BD44583BDA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hAA4TbAboVTbFaBBANlHyBBxANOnANYOvcMHJp5R7W4VHmPXyRI61QG:MbAbo5bFwElmnEmEY2JTR7lhJRNF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1112:AAEIKCA4AAAAAAAAAAAAAAIAAAAAABoAAAAAAIAgAAAAAAAAAAAAAAAABCAAABAAEAQgAAAAAAACEAAAUCAAAAAAAACAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00181c3c3c181800
Perceptual Hash:889d226237e3679d
Difference Hash:70b1717133f1f3b3
Wavelet Hash:1c3c3c3d3f3c3c18
Color Hash:#6ce0dc

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data