Security Report: feuerwehr-rieblingen.de - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c53d57b1-4a3f-434c-bd96-2422befef293 Domain and IP registration (RDAP)/api/v1/rdap/c53d57b1-4a3f-434c-bd96-2422befef293How often this domain was scanned/api/v1/domain/stats/feuerwehr-rieblingen.de Scan history for this domain/api/v1/domain/history/feuerwehr-rieblingen.de?limit=15

This website contacted 4 IPs in 2 countries across 4 domains to perform 49 HTTP transactions. The main domain is feuerwehr-rieblingen.de and was registered 17 years ago.

Submitted URL: https://feuerwehr-rieblingen.de

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate fire-brigade site that appears compromised: it serves an IClickFix EtherHiding loader via obfuscated scripts, with critical malware IDS alerts and a corroborated malicious domain (zvh4.com). Do not visit.

Risk Factors (5)

Compromised page injecting a ClickFix/EtherHiding malware loader into visitors' browsers

Critical IDS malware alerts tied to this page's traffic

Obfuscated script concealing threat-feed hosts

Blockchain smart-contract-based payload retrieval (EtherHiding) evades static blocklists

External resource zvh4.com corroborated as malicious by three feeds

Domain age information unavailable

Details

Page Title

FREIWILLIGE FEUERWEHR RIEBLINGEN – Retten · Löschen · Bergen · Schützen

Scan Type

public

Favicon Hash

MMH3: 1343064437

MD5: 002f046f0a1d6d168583fc2920e90f08

Domain Name Analysis

The domain name 'feuerwehr-rieblingen.de' uses the German country-code top-level domain (.de) without a subdomain. Count 20 characters in 'feuerwehr-rieblingen' split between 8 vowels and eleven consonants, notching one hyphen. Breaking it apart gives six words: feuer, we, hr, rie, b, lingen. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.79s

Total Load Time

4.9 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:14,130 chars

Detector Agreement:100%

Website Classification

Primary Category

news/blog40% confidence

Type: dynamic

Method: structural

All Detected Categories

news/blog

40%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	193.141.3.66	Germany	AS6724Strato GmbH
12	192.0.73.2	San Francisco, California, United States	AS2635Automattic, Inc
12	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
49	4	-	-