Security Scan Report: stiltzfranchise.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 25 IPs in 3 countries across 16 domains to perform 50 HTTP transactions. The main domain is stiltzfranchise.com and was registered 4 years ago.

Submitted URL: https://stiltzfranchise.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate Stiltz franchise site appears compromised: injected ClickFix/EtherHiding loader (analyst-vetted kit, CRITICAL YARA) resolves a payload host from a Polygon contract and loads malicious script host cloud-browse.codes. Visitors risk malware execution.

Risk Factors (5)
Compromised page injects a packed ClickFix overlay kit (fake 'Human Verification' prompting Win+X/Terminal) that leads to payload execution.
EtherHiding: payload host address fetched from a blockchain smart contract to evade takedown.
Obfuscated inline script conceals blockchain RPC endpoints and a malicious third-party host.
Page loads an unranked script host (cloud-browse.codes) with corroborated malicious reputation.
CRITICAL IDS malware signature (EtherHiding exfiltration) observed in the traffic.
Domain age information unavailable

Details

Page Title

Stiltz Home Lift Franchise | An Industry-Leading Opportunity

Scan Type

public

Domain Name Analysis

Domain 'stiltzfranchise.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Count 15 characters in 'stiltzfranchise' containing 4 vowels alongside 11 consonants. Word splitting yields three words: stilt, z, franchise. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://stiltzfranchise.com

Page Load Overview

1.57s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,260 chars
Detector Agreement:100%

Website Classification

Primary Category

real estate property45% confidence
Type: spa
Method: ml+structural

All Detected Categories

real estate property
45%
adult content
42%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2141.193.213.20Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
2104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.16.141.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.20.97Google · CDNUnited States
AS15169Google LLC
274.125.29.95Google · CDNUnited States
AS15169Google LLC
2142.251.20.94Google · CDNUnited States
AS15169Google LLC
2172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
218.66.102.53Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
2178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
5025--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DBB33F939390433FB3D48AD49245711B56E4E50BE434604DFBEA6AEFFA1CC826879732

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:StNrAnkxTFMvep3VgHqzJO7lMVF7A+oXYyp+tBVbbx/9EuYUJcwRfy1zzhB/9rhr:kpAnYmb5oBg7ATq6m/xqQwe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:107634:JRaoID0CKv4kmAKPrMAFsrgQRSU4kAmY1wiDNjBVEAlpAgAYOwCiQSgxBnmNJAAIRaZgAcQAQFooVFF4FAx+SRAEHkgBgWQp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7f3f1b1313131b1e
Perceptual Hash:8ce4d2f7d601d2e8
Difference Hash:e0f6f3f7e76bf2fc
Wavelet Hash:7f1f1b131b030b1e
Color Hash:#931f3c

Scan History

Scan history not available

Unable to load historical scan data