Security Report: ropacgroup.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5f95f95e-d6dd-48bc-9e35-7c40181f6a86 Domain and IP registration (RDAP)/api/v1/rdap/5f95f95e-d6dd-48bc-9e35-7c40181f6a86How often this domain was scanned/api/v1/domain/stats/ropacgroup.com Scan history for this domain/api/v1/domain/history/ropacgroup.com?limit=15

This website contacted 36 IPs in 2 countries across 24 domains to perform 226 HTTP transactions. The main domain is ropacgroup.com and was registered 11 years ago.

Submitted URL: https://ropacgroup.com

Effective URL:

https://www.ropacgroup.com/

Redirected

AI Security Verdict

High Risk

Confidence: 95%

Risk Score

Legitimate Italian engineering firm's site is compromised with a ClearFake/EtherHiding ClickFix overlay that lures visitors into pasting a Terminal command; malware served from the page despite no forms.

Risk Factors (5)

Compromised WordPress site injecting ClearFake/EtherHiding first-stage loader

ClickFix social-engineering overlay instructing Windows users to paste a PowerShell command into Terminal

Obfuscated script hides blockchain RPC hosts flagged in threat intelligence

EtherHiding: next-stage payload retrieved from a blockchain smart contract, evading takedown

Content-malware threat-intel entries against the primary domain (iclickfix) and the hidden BSC RPC hosts (vidar)

Domain age information unavailable

Details

Page Title

Ropac Group – continuous innovation

Scan Type

public

Favicon Hash

MMH3: -587444819

MD5: 44d732223328fde0f484f700d5898f02

Domain Name Analysis

The domain 'ropacgroup.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'ropacgroup' stretches across 10 characters split between four vowels and six consonants. It segments into three words: ro, pac, group. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.04s

Total Load Time

6.6 MB

Total Size

Language Analysis

Primary Language

🇮🇹Italian

Code: it

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:6,527 chars

Detector Agreement:75%

Website Classification

Primary Category

documentation technical81% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

81%

technology software

67%

government public service

51%

corporate business

29%

forum

25%

Detected Features

Articles

Comments

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
16	89.46.104.20	Arezzo, Tuscany, Italy	AS31034Aruba S.p.A.
6	142.251.110.95Google · CDN	United States	AS15169Google LLC
6	192.0.76.3	San Francisco, California, United States	AS2635Automattic, Inc
6	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	35.71.129.99Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
226	36	-	-