Security Scan Report: stilles-oertchen.de

Redirected to:
https://stilles-oertchen.de/HomeWell/download.html
Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 4 domains to perform 10 HTTP transactions. The main domain is stilles-oertchen.de and was registered 3 months ago.

Submitted URL: https://stilles-oertchen.de/HomeWell/

Effective URL:
https://stilles-oertchen.de/HomeWell/download.html
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Confirmed malicious fake Adobe 'secured document' download page on a compromised domain, bearing a CRITICAL vetted-kit and hunting rule identification plus Safe Browsing social-engineering hits; it delivers a remote-management agent. Do not download.

Risk Factors (6)
Known malicious phishing kit: fake Adobe secured-document lure delivering a remote-management agent
CRITICAL hunting rule hit Adobe_Secure_Document_RMM_Lure_Kit on the HTML body
Two Google Safe Browsing social-engineering detections
Domain-level and URL-level phishing reports corroborated by multiple threat feeds
Brand impersonation of Adobe on a non-Adobe domain (title 'Background Image Page' has no relation to stilles-oertchen.de)
Visitor fingerprinting/IP geolocation gating (api.ipify.org) consistent with evading sandboxes and non-target platforms
Domain age information unavailable

Details

Page Title

Background Image Page

Scan Type

public

Domain Name Analysis

The domain name 'stilles-oertchen.de' uses the German country-code top-level domain (.de). Its registrable label 'stilles-oertchen' stretches across 16 characters holding five vowels versus 10 consonants; bonus characters include one hyphen. Tokenizing the label suggests 5 words: still, es, o, ert, chen. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Adobe _Creativity& Design v PDF & E-signatures v Marketing & Commerce v Leam & Support v Q Search Adobe | @ 8 Home 8, Shared with you Ey & Projects {B Libraries & brands. 8 @ Review links .| mom u...

Page Load Overview

0.28s
Total Load Time
157 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:329 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical60% confidence
Type: static
Method: ml+structural

All Detected Categories

healthcare medical
60%
documentation technical
35%
government public service
34%
technology software
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5213.136.93.164Lauterbourg, Grand Est, France
AS51167Contabo GmbH
1142.251.127.95Google · CDNUnited States
AS15169Google LLC
1104.26.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
1104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
106--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15C61614BA9F3005B390790716BF36B062675C003D20ACA593FBD62E8CF84A9484B73CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:nBr+5LMAFtyizQfYn9lPh7TsFWte6TFtWyN8y7euXDc:nBr0z9zQfk9lFoFWte4tWyneuXDc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3291:AAgAAgBMNEMEAGgAgAAAQBBAIEAABABGIBUkAAEAIoFAiBABAmAEAAAgAACQACAkgAFAAAgkAACAAAAAmAiEAkBwEAAJAIIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00001c3c3c3c0000
Perceptual Hash:9c1c6363ed9c9c98
Difference Hash:c4b23232b2aab084
Wavelet Hash:00063e3e7e7e427e
Color Hash:07200000007

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data