ScanMalware.com

Security Scan Report: hartmann-immo-ffb.de

Bot Protection Detected

This website is protected by captcha bot protection. The screenshot and page details below show the page as it was captured.

Submitted: Sep 12, 2026, 8:47:29 PMCompleted: Sep 12, 2026, 8:47:55 PMpubliccompleted

Summary

This website contacted 9 IPs in 2 countries across 9 domains to perform 2 HTTP transactions. The main domain is hartmann-immo-ffb.de and was registered 21 years ago.

Submitted URL: https://hartmann-immo-ffb.de

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Deactivated-looking page pushes a fake CAPTCHA that tells victims to paste a command into PowerShell. EtherHiding blockchain loader with 20 CRITICAL malware-exfil IDS alerts — active malware distribution.

Risk Factors
Fake CAPTCHA 'verification' that directs the user to paste an attacker-supplied command into PowerShell (ClickFix)
Blockchain (BSC) RPC connections used as malware loader/dead-drop channel (EtherHiding)
20 CRITICAL IDS malware/exfiltration alerts
Obfuscated inline JavaScript with eval() and encoding routines
Primary domain reported in threat intel as a malware loader
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(78%)

Domain Information

The domain 'hartmann-immo-ffb.de' uses the German country-code top-level domain (.de) without a subdomain. The core label 'hartmann-immo-ffb' covers 17 characters split between 4 vowels and eleven consonants; bonus characters include two hyphens. It segments into 4 words: hartmann, i, mmo, ffb. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hartmann-immo-ffb.de

Page Load Overview

4.83s
Total Load Time
15
HTTP Requests
9
Domains
18 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:933 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software78% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
78%
government public service
60%
healthcare medical
55%
adult content
53%
documentation technical
52%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
781.169.145.159Germany
AS6724Strato GmbH
13.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
115.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
1104.18.11.59Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
152.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
159--

Page Statistics

15
Requests
9
Unique Domains
422.1 KB
Total Size

Detected Technologies5

WordPressv7.1
100%
MetaGenerator
100%
PHP
50%
MySQL
50%
UNIX
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A873C032D1B1027AFE9EC7BE8191B338A89C5F55CB07277570B931249D58AFA049732D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:lGypbUNe5QWpBiqTwwgpzermXkJ9RfiTZvckL:l/VQe5lBYzetPq3L

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:74693:qBRkBMxJdsjdFEiXBBElYACFgR+ACjQPpMXsgghnuIxhgZDBlhnQKBAQGMAAIFIQaUDCUAAcBNsJyCrdE+iQmzyQLwEgSsFA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:87ffffffffffffff
Perceptual Hash:b93939393939383a
Difference Hash:1800000000000000
Wavelet Hash:87ffffff00000000
Color Hash:#4b3a78

Other Hashes

Crop Resistant:1800000000000000

Scan History

Scan history not available

Unable to load historical scan data