Security Scan: Alpine Tours and Travels

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7006124d-68bd-4e69-815c-7dce821ae880 Domain and IP registration (RDAP)/api/v1/rdap/7006124d-68bd-4e69-815c-7dce821ae880 Certificate Transparency/api/v1/ct/alpinetoursandtravels.com How often this domain was scanned/api/v1/domain/stats/alpinetoursandtravels.com Scan history for this domain/api/v1/domain/history/alpinetoursandtravels.com?limit=15

This website contacted 5 IPs in 1 country across 4 domains to perform 91 HTTP transactions. The main domain is alpinetoursandtravels.com and was registered 3 weeks ago.

Submitted URL: https://alpinetoursandtravels.com

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Genuine-looking Bhutan travel site, but its page loads a malware-flagged resource (xaz2.com) and fires a CRITICAL EtherHiding exfiltration IDS alert via a blockchain RPC domain — apparent compromise serving malware. No forms, so the risk is malware, not phishing.

Risk Factors

CRITICAL Suricata malware alert (EtherHiding exfiltration) on the page's network traffic

Malware-flagged third-party resource (xaz2.com) loaded by the page

Blockchain RPC domain contact (sepolia.gateway.tenderly.co) linked to the EtherHiding alert

Single-source malware report on the primary domain

Pattern matches a compromised legitimate site being used to distribute/inject EtherHiding malware

Domain age information unavailable

Details

Page Title

Alpine Tours and Travels

Scan Type

public

Favicon Hash

MMH3: -1046074201

MD5: f12369cdfacc1c89923b2babb0eee67e

Domain Name Analysis

The domain 'alpinetoursandtravels.com' uses the commercial generic top-level domain (.com) with no subdomain. Its registrable label 'alpinetoursandtravels' stretches across 21 characters split between 8 vowels and 13 consonants. Tokenizing the label suggests 4 words: alpine, tours, and, travels. The median word length lands at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

25.96s

Total Load Time

6.6 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:3,218 chars

Detector Agreement:100%

Website Classification

Primary Category

travel tourism85% confidence

Type: spa

Method: ml+structural

All Detected Categories

travel tourism

85%

government public service

40%

news/blog

20%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
19	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
18	162.210.96.117	United States	AS14555LiquidNet US LLC
18	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
18	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
18	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
91	5	-	-