Security Scan Report: tarotterapeutico.info

Redirected to:
https://tarotterapeutico.info/en/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 19 IPs in 2 countries across 13 domains to perform 141 HTTP transactions. The main domain is tarotterapeutico.info and was registered 22 years ago.

Submitted URL: https://tarotterapeutico.info

Effective URL:
https://tarotterapeutico.info/en/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Hijacked WordPress tarot site injecting the analyst-vetted ErrTraffic/Exvicy loader with CRITICAL EtherHiding exfiltration alerts and blockchain-RPC C2 — visitors risk drive-by compromise.

Risk Factors (5)
Compromised WordPress site serving an injected JavaScript loader (ErrTraffic/Exvicy)
CRITICAL IDS malware detections for EtherHiding exfiltration (x3)
Blockchain RPC communication used as a covert payload/C2 channel
Third-party resource lovezramexar.info flagged as a malicious exploitation kit by 3 feeds
Primary domain flagged as an 'unknown loader (malware)' by a threat-intel feed
Domain age information unavailable

Details

Page Title

Tarot Terapêutico

Scan Type

public

Domain Name Analysis

Within the informational generic top-level domain (.info), 'tarotterapeutico.info' is registered and has no subdomain. The second-level label 'tarotterapeutico' is 16 characters long split between eight vowels and eight consonants. It segments into 4 words: tarot, te, rape, utico. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://tarotterapeutico.info

Page Load Overview

75.08s
Total Load Time
3.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:9,837 chars
Detector Agreement:67%

Website Classification

Primary Category

adult content51% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
51%
education learning
45%
healthcare medical
32%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15104.21.5.141Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7172.66.169.241Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.157.119Google · CDNUnited States
AS15169Google LLC
7188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7158.94.208.87Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
7104.26.8.44Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.250.154.94Google · CDNUnited States
AS15169Google LLC
7172.67.154.165Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.152.119Google · CDNUnited States
AS15169Google LLC
14119--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18024953355292827017BC7C930BA573AD29A9A1FFA920A417EFCC3F957FACA07157109

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:jGG/IzFB8A92AQALbApVMjxA0AJzoUYkYFQ/bJ2sPJNfF+fzfmSGOHTrIQ+fUgYC:gB5FwHpJzoUYkqQMSeC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:215212:CQGewiIBlgEAIPWoB5EwAqhoEchnBS8UCSgFoEmBJWBQAohKQGAAABRSAqUmBAllIxqWYCAgZAISPYBBAg0BAAG6zU8jQABQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffff0e0e0e0e
Perceptual Hash:936c17116becb391
Difference Hash:d1f000c9dc98dc5c
Wavelet Hash:003cffff0e0e0e0e
Color Hash:#53bf40

Scan History

Scan history not available

Unable to load historical scan data