Security Scan: Welcome to Saranda Estates. Your trusted real

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6230551c-9967-4389-bf81-e2fb87bcab92 Domain and IP registration (RDAP)/api/v1/rdap/6230551c-9967-4389-bf81-e2fb87bcab92 Certificate Transparency/api/v1/ct/sarandaestates.com How often this domain was scanned/api/v1/domain/stats/sarandaestates.com Scan history for this domain/api/v1/domain/history/sarandaestates.com?limit=15

This website contacted 27 IPs in 3 countries across 20 domains to perform 160 HTTP transactions. The main domain is sarandaestates.com and was registered 21 years ago.

Submitted URL: https://sarandaestates.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate Saranda Estates real-estate site compromised and serving a ClickFix/EtherHiding 'Human Verification' overlay that pushes Windows users to open Terminal and paste a blockchain-delivered loader; multiple CRITICAL IDS and kit-roster hits.

Risk Factors (5)

Injected ClickFix / 'Human Verification' overlay instructing Windows users to open Terminal and paste commands (Win+X social engineering)

Blockchain-based (EtherHiding) loader retrieving the overlay payload from smart contracts

10 CRITICAL network IDS alerts for ClickFix domain, EtherHiding exfiltration and exploit-kit check-in traffic

Primary domain flagged as a malware 'unknown loader' by threat intelligence

Compromised WordPress real-estate site acting as a malware delivery vector

Domain age information unavailable

Details

Page Title

Welcome to Saranda Estates. Your trusted real estate partner in Albania

Scan Type

public

Favicon Hash

MMH3: 1335452876

MD5: fbd83ba06ecbc65d4f7dc951b641dcfa

Domain Name Analysis

Domain 'sarandaestates.com' uses the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'sarandaestates' spans 14 characters with six vowels and eight consonants. Breaking it apart gives 3 words: s, aranda, estates. Expect six characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.31s

Total Load Time

5.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-GB

Text Length:5,768 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software46% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

46%

documentation technical

37%

corporate

35%

real estate property

34%

social_media

25%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
30	79.96.233.254	Poland	AS12824home.pl sp. z o.o.
5	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.251.110.95Google · CDN	United States	AS15169Google LLC
5	142.251.13.97Google · CDN	United States	AS15169Google LLC
5	104.21.3.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
5	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
5	142.251.14.94Google · CDN	United States	AS15169Google LLC
5	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
5	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
160	27	-	-