Security Scan Report: algherocar.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 44 IPs in 4 countries across 20 domains to perform 237 HTTP transactions. The main domain is algherocar.com and was registered 5 years ago.

Submitted URL: https://algherocar.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised legitimate Alghero car-rental site now serving the ClickFix 'Human Verification' kit: CRITICAL roster/YARA hits plus EtherHiding blockchain loader and malware IDS alerts. Do not interact; never press Win+X as instructed.

Risk Factors (6)
Known ClickFix 'Human Verification' malware kit injected into the page (CRITICAL, analyst-vetted)
Two CRITICAL YARA matches for the ClickFix packed blockchain contract loader
EtherHiding: next-stage payload address read from a Polygon smart contract, with threat-feed hosts (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co) hidden in obfuscated JavaScript
CRITICAL IDS alerts for malware exfiltration (EtherHiding) and exploit-kit activity, plus a HIGH Spamhaus DROP inbound alert
Unranked third-party script hosts (b-action.bvan.it, browse-codes-enter.beer) contacted via fetch alongside the injected loader
Fake 'I'm not a robot / reCAPTCHA' overlay text steering Windows users toward keyboard-driven command execution
Domain age information unavailable

Details

Page Title

Home page - Alghero Car Rental

Scan Type

public

Domain Name Analysis

Domain 'algherocar.com' uses the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'algherocar' stretches across 10 characters split between four vowels and 6 consonants. Breaking it apart gives two words: alghero, car. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://algherocar.com

Page Load Overview

12.66s
Total Load Time
6.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:4,300 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical96% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
96%
blog personal website
96%
news media journalism
95%
social media network
93%
travel tourism
93%

Detected Features

Login Form
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2294.23.69.227France
AS16276OVH SAS
5206.189.242.153Amsterdam, North Holland, Netherlands
AS14061DigitalOcean, LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
518.64.181.66Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
5142.250.154.139Google · CDNUnited States
AS15169Google LLC
5172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.153.4Google · CDNUnited States
AS15169Google LLC
5142.251.156.119Google · CDNUnited States
AS15169Google LLC
5178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
5142.251.13.94Google · CDNUnited States
AS15169Google LLC
23744--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B4D309717A5D0C26164F07DF901AB20C54EAC973EA21D1F1F6FB40AC6A92CD1B1AE72D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:gP/R8SJGAtPaBYB/gj2XriTZ43IPrNyiuGLMBG0NhXRM9LjZVouUM47Q9u110UR5:gnt8KRiTZ43IPr4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:142397:cKIA41lYYGuwJCWWgWSFJFFJQQwk1SF8IAEAuhcoQiDpiEhDV8KF5xIixBM9wCQOGRksCANFdmAEAYaTMEjUVEgAJAOPAgki

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00007e7e6600ffff
Perceptual Hash:d555fd6be68009a2
Difference Hash:4222f0cccc900800
Wavelet Hash:00007e7e6600ffff
Color Hash:#c5878c

Other Hashes

Crop Resistant:4222f0cccc900800

Scan History

Scan history not available

Unable to load historical scan data