Security Scan: Curierul zilei

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/272fdbb8-35d5-4aab-aad0-5383d0743e51 Domain and IP registration (RDAP)/api/v1/rdap/272fdbb8-35d5-4aab-aad0-5383d0743e51How often this domain was scanned/api/v1/domain/stats/curier.ro Scan history for this domain/api/v1/domain/history/curier.ro?limit=15

This website contacted 22 IPs in 3 countries across 12 domains to perform 274 HTTP transactions. The main domain is curier.ro.

Submitted URL: https://curier.ro

AI Security Verdict

Confirmed Scam

Confidence: 85%

Risk Score

Two-day-old domain serving a repurposed news page while checking into the ErrTraffic exploit-kit cluster and using EtherHiding blockchain exfiltration — active malware distribution, avoid.

Risk Factors (6)

Domain registered only 2 days ago (CRITICAL age risk, 3x multiplier)

CRITICAL IDS: errTraffic exploit-kit cluster check-in and EtherHiding malware exfiltration

Blockchain RPC communication used to hide malicious C2/payload on a brand-new domain

Loaded resource aleverifocation.beer and linked domain aureverre.ch flagged as clearfake/ErrTraffic malware (multi-source)

Primary domain curier.ro flagged as 'unknown loader' malware

Domain age information unavailable

Details

Page Title

Curierul zilei

Scan Type

public

Favicon Hash

MMH3: 1766283171

MD5: f940e6c2d1cebb3222cef584f78cd36b

Domain Name Analysis

You're looking at domain 'curier.ro' on the Romanian country-code top-level domain (.ro) with no subdomain. The second-level label 'curier' is 6 characters long split between three vowels and three consonants. Segmentation suggests two words: curie, r. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

22.86s

Total Load Time

9.1 MB

Total Size

Language Analysis

Primary Language

🇷🇴Romanian

Code: ro

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:ro-RO

Text Length:57,846 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism93% confidence

Type: webapp

Method: ml+structural

All Detected Categories

news media journalism

93%

social media network

92%

government public service

80%

adult content

66%

blog personal website

54%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
22	92.114.94.233	Romania	AS44043Cyber_Folks SRL
12	142.251.13.95Google · CDN	United States	AS15169Google LLC
12	142.251.13.97Google · CDN	United States	AS15169Google LLC
12	142.251.13.157Google · CDN	United States	AS15169Google LLC
12	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	104.18.10.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
12	142.250.154.95Google · CDN	United States	AS15169Google LLC
12	142.251.20.97Google · CDN	United States	AS15169Google LLC
274	22	-	-