Security Report: simonacheli.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0b620494-adc0-42a8-b10e-5c58c92f53d3 Domain and IP registration (RDAP)/api/v1/rdap/0b620494-adc0-42a8-b10e-5c58c92f53d3 Certificate Transparency/api/v1/ct/simonacheli.com How often this domain was scanned/api/v1/domain/stats/simonacheli.com Scan history for this domain/api/v1/domain/history/simonacheli.com?limit=15

This website contacted 10 IPs in 3 countries across 13 domains to perform 33 HTTP transactions. The main domain is simonacheli.com and was registered 4 months ago.

Submitted URL: https://simonacheli.com

Effective URL:

https://www.simonacheli.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Established WordPress site compromised and serving the ErrTraffic/Exvicy ClickFix loader with EtherHiding blockchain exfiltration; critical IDS alerts and multi-source Indicators of Compromise confirm malware distribution.

Risk Factors (5)

Compromised WordPress site serving an injected ClickFix/ErrTraffic loader (YARA + kits roster)

Critical network IDS alerts for ClickFix domain resolution and EtherHiding exfiltration

Multiple malicious third-party domains loaded by the page, corroborated across independent threat feeds

Unranked script host cosmical2049.com (reported PowerShell injector) supplying JavaScript

Use of Function() constructor calls (3) consistent with the injected loader pattern

Domain age information unavailable

Details

Page Title

home - :: Simona Cheli ::

Scan Type

public

Favicon Hash

MMH3: 1838780341

MD5: 6ac2f0e2614c196a1e31167c6b12ed0a

Domain Name Analysis

The domain name 'simonacheli.com' uses the commercial generic top-level domain (.com) and has no subdomain. The core label 'simonacheli' covers 11 characters with five vowels and six consonants. Segmentation suggests three words: simon, ache, li. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

25.15s

Total Load Time

2.4 MB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:442 chars

Detector Agreement:67%

Website Classification

Primary Category

adult content30% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content

30%

government public service

28%

corporate

25%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	185.42.104.235	Spain	AS19771210dencehispahard, S.L.
3	142.251.20.95Google · CDN	United States	AS15169Google LLC
3	195.58.146.210	Denmark	AS9009M247 Europe SRL
3	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.14.94Google · CDN	United States	AS15169Google LLC
3	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.13.95Google · CDN	United States	AS15169Google LLC
3	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
3	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
33	10	-	-