Security Report: immobilien-singer.de - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/be814497-5b46-45c1-a2b8-4e06656658a6 Domain and IP registration (RDAP)/api/v1/rdap/be814497-5b46-45c1-a2b8-4e06656658a6How often this domain was scanned/api/v1/domain/stats/immobilien-singer.de Scan history for this domain/api/v1/domain/history/immobilien-singer.de?limit=15

This website contacted 14 IPs in 2 countries across 11 domains to perform 62 HTTP transactions. The main domain is immobilien-singer.de.

Submitted URL: https://immobilien-singer.de

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Legitimate-looking German real-estate agent page whose scripts trigger critical EtherHiding malware exfiltration IDS alerts and blockchain RPC/Ethereum calls on a 1-day-old domain, plus a malware-loader IoC — likely compromised or weaponized content.

Risk Factors (5)

Critical network IDS alerts for EtherHiding malware exfiltration (x3)

Blockchain RPC connections and Ethereum smart-contract getDomain() calls from a broker website (no crypto content)

Primary domain flagged as malware loader

Loaded third-party domain checkyoubrowse.codes flagged malicious by two independent feeds

Domain registered 1 day ago and absent from Cisco Umbrella ranking

Domain age information unavailable

Details

Page Title

Immobilien Singer – Immobilienmakler in der Region Landau an der Isar und Dingolfing - Immobilien Singer - Immobilienmakler in der Region Landau an der Isar und Dingolfing

Scan Type

public

Favicon Hash

MMH3: 2010356506

MD5: 49a73ce598525431c1efee4d1bc1db35

Domain Name Analysis

The domain name 'immobilien-singer.de' uses the German country-code top-level domain (.de) without a subdomain. The registrable portion 'immobilien-singer' spans 17 characters with seven vowels and 9 consonants, notching 1 hyphen. It segments into 4 words: im, mobil, ien, singer. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.28s

Total Load Time

1.5 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:8,419 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence

Type: spa

Method: structural

All Detected Categories

corporate

70%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	165.22.17.181	Frankfurt am Main, Hesse, Germany	AS14061DigitalOcean, LLC
4	142.251.110.97Google · CDN	United States	AS15169Google LLC
4	23.36.162.211Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
4	142.251.20.95Google · CDN	United States	AS15169Google LLC
4	216.239.32.36Google · CDN	United States	AS15169Google LLC
4	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	23.45.103.56Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
4	142.251.14.94Google · CDN	United States	AS15169Google LLC
4	3.174.46.66Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
4	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
62	14	-	-