Security Scan: Siemens Gerüstbau Gerüstbauarbeiten aller Art

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/541aa342-eb11-44f7-9394-aeb33ff9e69a Domain and IP registration (RDAP)/api/v1/rdap/541aa342-eb11-44f7-9394-aeb33ff9e69a Certificate Transparency/api/v1/ct/siemens-geruestbau.de How often this domain was scanned/api/v1/domain/stats/siemens-geruestbau.de Scan history for this domain/api/v1/domain/history/siemens-geruestbau.de?limit=15

This website contacted 5 IPs in 2 countries across 5 domains to perform 73 HTTP transactions. The main domain is siemens-geruestbau.de and was registered 1 month ago.

Submitted URL: https://siemens-geruestbau.de

Effective URL:

https://www.siemens-geruestbau.de/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate German scaffolding firm's site has been compromised with a ClickFix/EtherHiding loader — obfuscated JS pulls an encrypted second stage from an Ethereum contract. Malware distribution; do not visit.

Risk Factors (5)

Known malicious ClickFix/EtherHiding kit injected into the page (compromised website serving a fake browser-update lure)

Multiple CRITICAL Suricata malware alerts (ClickFix C2, EtherHiding exfiltration)

Obfuscated JavaScript with blockchain-based payload retrieval hidden from casual inspection

Threat-intel feeds mark the site's own domain and its loaded resources as malware/known-attacker

Domain is only ~288 days old and unranked in Cisco Umbrella

Domain age information unavailable

Details

Page Title

Siemens Gerüstbau Gerüstbauarbeiten aller Art.

Scan Type

public

Favicon Hash

MMH3: 1433451267

MD5: baac30d6b07095e2ddd0b0b521062473

Domain Name Analysis

You're looking at domain 'siemens-geruestbau.de' on the German country-code top-level domain (.de) without a subdomain. Count 18 characters in 'siemens-geruestbau' containing 8 vowels alongside nine consonants, plus one hyphen. Splitting it apart reveals 5 words: siemens, ge, rue, st, bau. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.97s

Total Load Time

4.8 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:2,483 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business95% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

95%

real estate property

92%

documentation technical

88%

government public service

65%

blog personal website

37%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	85.13.135.87	Germany	AS34788Neue Medien Muennich GmbH
14	104.26.12.19Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
14	104.21.72.64Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	104.26.13.19Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
73	5	-	-