Security Report: starpex.tn - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/53b83a5a-5f9e-4dfb-b484-aba12b1a0456 Domain and IP registration (RDAP)/api/v1/rdap/53b83a5a-5f9e-4dfb-b484-aba12b1a0456How often this domain was scanned/api/v1/domain/stats/starpex.tn Scan history for this domain/api/v1/domain/history/starpex.tn?limit=15

This website contacted 29 IPs in 4 countries across 21 domains to perform 228 HTTP transactions. The main domain is starpex.tn.

Submitted URL: https://starpex.tn

AI Security Verdict

High Risk

Confidence: 92%

Risk Score

Legitimate-looking Starpex pipe page whose WordPress install is compromised: injected obfuscated EtherHiding loader (ErrTraffic/Exvicy) with CRITICAL malware IDS alerts and flagged third-party hosts. Do not interact.

Risk Factors (5)

Compromised WordPress page serving an injected obfuscated loader (ErrTraffic/Exvicy, XOR-decoded Base64 executed via new Function)

EtherHiding: script fetches its command/stage address from a smart contract on a public blockchain, evading static blocklists

CRITICAL IDS malware/exfiltration alerts (ET MALWARE EtherHiding Exfil M2) on this page's traffic

Page loads resources from several domains flagged as multi-feed malware (clearfake/ek) distributions

Obfuscated scripts conceal blockchain RPC endpoints and known-attacker hosts from casual inspection

Domain age information unavailable

Details

Page Title

TUBE MULTICOUCHE PE-RT/AL/PE-RT - Starpexother network

Scan Type

public

Favicon Hash

MMH3: 1171721149

MD5: 203f14f1e6de4bd78df6fe458ee37318

Domain Name Analysis

The domain 'starpex.tn' uses the Tunisian country-code top-level domain (.tn). Its registrable label 'starpex' stretches across 7 characters holding 2 vowels versus 5 consonants. It segments into three words: star, p, ex. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

90.75s

Total Load Time

3.1 MB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR

Text Length:4,299 chars

Detector Agreement:60%

Website Classification

Primary Category

documentation technical72% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

72%

government public service

66%

social media network

65%

healthcare medical

64%

corporate business

59%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
32	188.165.0.143	France	AS16276OVH SAS
7	142.251.110.97Google · CDN	United States	AS15169Google LLC
7	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
7	192.178.183.95Google · CDN	United States	AS15169Google LLC
7	172.217.114.4Google · CDN	United States	AS15169Google LLC
7	216.239.32.36Google · CDN	United States	AS15169Google LLC
7	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
7	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	142.251.20.94Google · CDN	United States	AS15169Google LLC
228	29	-	-