Security Report: velasadagio.com.ar - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4cc946b1-dfdb-4af1-9350-5c0f6f07916f Domain and IP registration (RDAP)/api/v1/rdap/4cc946b1-dfdb-4af1-9350-5c0f6f07916fHow often this domain was scanned/api/v1/domain/stats/velasadagio.com.ar Scan history for this domain/api/v1/domain/history/velasadagio.com.ar?limit=15

This website contacted 15 IPs in 2 countries across 13 domains to perform 70 HTTP transactions. The main domain is velasadagio.com.ar.

Submitted URL: https://velasadagio.com.ar/

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Compromised WordPress site serving an injected ErrTraffic/Exvicy loader, EtherHiding blockchain C2/exfiltration and injected casino SEO spam. Domain flagged as malware; do not visit or interact.

Risk Factors (5)

Injected ErrTraffic/Exvicy ClickFix loader executed via obfuscated Base64 + new Function() (YARA CRITICAL).

EtherHiding exfiltration: CRITICAL IDS alerts and live connections to blockchain RPC nodes (polygon.drpc.org, polygon-bor-rpc.publicnode.com, 1rpc.io) from a brand-new domain.

Third-party resources loaded from flagged malware hosts: ohhhhhmoney.com and lovezramexar.info ('ek clearfake-1', 3 feeds) and rehearsal-b.com ('malicious host', 2 feeds).

Mass-injected multilingual gambling/casino SEO spam in the page content of an unrelated candle business.

Primary domain and URL flagged as malware/loader by multi-source threat intelligence; domain only 9 days old.

Domain age information unavailable

Details

Page Title

Velas Adagio | Excelencia en velas

Scan Type

public

Domain Name Analysis

You're looking at domain 'velasadagio.com.ar' on the Argentine country-code top-level domain (.com.ar) and has no subdomain. The registrable portion 'velasadagio' spans 11 characters with six vowels and 5 consonants. Breaking it apart gives three words: vel, as, adagio. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

29.51s

Total Load Time

887 KB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:5,815 chars

Detector Agreement:100%

Website Classification

Primary Category

adult content55% confidence

Type: spa

Method: ml+structural

All Detected Categories

adult content

55%

blog personal website

32%

news/blog

20%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	172.67.163.33Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.250.154.94Google · CDN	United States	AS15169Google LLC
4	158.94.208.87	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
4	104.21.95.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.21.15.164Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.14.94Google · CDN	United States	AS15169Google LLC
4	172.67.171.128Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
70	15	-	-