Security Report: sempiternodelgolfo.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0fffd328-4840-4a23-b1bd-99206e81bedb Domain and IP registration (RDAP)/api/v1/rdap/0fffd328-4840-4a23-b1bd-99206e81bedbHow often this domain was scanned/api/v1/domain/stats/sempiternodelgolfo.com Scan history for this domain/api/v1/domain/history/sempiternodelgolfo.com?limit=15

This website contacted 15 IPs in 1 country across 14 domains to perform 65 HTTP transactions. The main domain is sempiternodelgolfo.com and was registered 4 years 11 months ago.

Submitted URL: https://sempiternodelgolfo.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Compromised construction-company site injecting a ClickFix fake-verification overlay that lures Windows users into pasting PowerShell commands, with EtherHiding payload retrieval and Vidar-linked hosts.

Risk Factors (5)

Injected ClickFix social-engineering overlay (fake 'I am not a robot' verification) with paste-into-Terminal instructions

EtherHiding: blockchain-contract-hosted payload retrieval with CRITICAL IDS exfiltration alerts

Obfuscated JavaScript concealing known-attacker and Vidar-malware hostnames

Page connects to multiple BSC testnet RPC endpoints, consistent with blockchain-based payload delivery

Primary domain flagged as a malware loader in threat intelligence

Domain age information unavailable

Details

Page Title

Sempiterno del Golfo – Sempiterno del Golfo

Scan Type

public

Favicon Hash

MMH3: -1036724489

MD5: 9d0d8ab409c3f4de6a5daedc79986819

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'sempiternodelgolfo.com' is registered with no subdomain. The second-level label 'sempiternodelgolfo' is 18 characters long holding seven vowels versus eleven consonants. It segments into five words: sem, pite, rno, del, golfo. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

XI Servicios Facturacién Contacto Construccién de Edificaciones e La manera mds segura de conseguir el éxito. Contamos con 21 afios de experiencia en el mercado en el ramo de la construccién | que...

Page Load Overview

3.99s

Total Load Time

2.9 MB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:3,154 chars

Detector Agreement:75%

Website Classification

Primary Category

government public service90% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

90%

documentation technical

87%

corporate business

77%

adult content

71%

real estate property

51%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	50.6.224.210	Ashburn, Virginia, United States	AS31898Oracle Corporation
4	142.251.20.95Google · CDN	United States	AS15169Google LLC
4	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
4	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	52.223.48.152Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	142.251.14.94Google · CDN	United States	AS15169Google LLC
65	15	-	-