Security Report: lalla-essaouira.marocboutons.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6998b019-2049-463f-b177-a87c830e6d19 Domain and IP registration (RDAP)/api/v1/rdap/6998b019-2049-463f-b177-a87c830e6d19How often this domain was scanned/api/v1/domain/stats/lalla-essaouira.marocboutons.com Scan history for this domain/api/v1/domain/history/lalla-essaouira.marocboutons.com?limit=15

This website contacted 30 IPs in 3 countries across 19 domains to perform 171 HTTP transactions. The main domain is marocboutons.com and was registered 1 year 10 months ago.

Submitted URL: https://lalla-essaouira.marocboutons.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Compromised villa-rental site serving an EtherHiding ClickFix malware loader: obfuscated JS pulls a fake 'Human Verification' overlay from a blockchain contract, with nine CRITICAL IDS malware alerts. Do not interact.

Risk Factors (5)

Injected ClickFix / EtherHiding malware kit executing on the page (analyst-vetted CRITICAL)

Obfuscated JavaScript that resolves its payload from a blockchain smart contract

Nine CRITICAL network IDS malware alerts for EtherHiding exfiltration

Fake 'Human Verification' overlay instructing Windows users to open Terminal and paste commands

Compromised/backdoored legitimate-looking tourism site used as malware delivery vehicle

Domain age information unavailable

Details

Page Title

lalla-essaouira – lalla-essaouira

Scan Type

public

Favicon Hash

MMH3: 530492348

MD5: dcab89b8e04bf53fcd7f6a44a8cb4fae

Domain Name Analysis

Domain 'lalla-essaouira.marocboutons.com' uses the commercial generic top-level domain (.com) with subdomain 'lalla-essaouira'. The second-level label 'marocboutons' is 12 characters long holding 5 vowels versus seven consonants. Word splitting yields 3 words: maroc, bouton, s. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.64s

Total Load Time

8.2 MB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR

Text Length:9,711 chars

Detector Agreement:95%

All Detected Languages

🇫🇷fr(92%)🇺🇸en(6%)🇵🇹pt(1%)🇩🇪de(1%)🇪🇸ca(1%)

Website Classification

Primary Category

unknown0% confidence

Type: spa

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
119	185.221.182.95	Paris, Île-de-France, France	AS53589PlanetHoster
14	142.251.150.4Google · CDN	United States	AS15169Google LLC
5	142.250.154.95Google · CDN	United States	AS15169Google LLC
5	104.16.179.112Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.251.14.94Google · CDN	United States	AS15169Google LLC
5	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.251.151.4Google · CDN	United States	AS15169Google LLC
5	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
171	30	-	-