Security Report: cambusa.eu - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/826a97d5-55e4-496a-9220-ac52aea303a4 Domain and IP registration (RDAP)/api/v1/rdap/826a97d5-55e4-496a-9220-ac52aea303a4How often this domain was scanned/api/v1/domain/stats/cambusa.eu Scan history for this domain/api/v1/domain/history/cambusa.eu?limit=15

This website contacted 7 IPs in 2 countries across 8 domains to perform 87 HTTP transactions. The main domain is cambusa.eu.

Submitted URL: https://cambusa.eu

Effective URL:

https://www.cambusa.eu/en/home-3/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 94%

Risk Score

Legitimate Cambusa/Chamber of Commerce site that appears compromised: an injected ClickFix/EtherHiding loader, blockchain-resolved payload, CRITICAL malware IDS alert and Safe Browsing flag make the page unsafe to visit.

Risk Factors (6)

Known malicious ClickFix/EtherHiding kit injected into the page (analyst-vetted, CRITICAL)

Obfuscated JavaScript that retrieves its payload address from a Polygon smart contract

CRITICAL IDS malware alert (EtherHiding Exfil) plus blockchain RPC traffic to public nodes

Google Safe Browsing Unwanted Software detection

Multi-source threat-intel match on loaded resource cloud-browse.codes (exploit kit 'clearfake')

Single-source malware-feed match on the domain itself (iclickfix)

Domain age information unavailable

Details

Page Title

Cambusa – Regional products for sailors

Scan Type

public

Domain Name Analysis

The domain name 'cambusa.eu' uses the .eu country-code top-level domain without a subdomain. The second-level label 'cambusa' is 7 characters long holding 3 vowels versus 4 consonants. Tokenizing the label suggests 2 words: camb, usa. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

11.22s

Total Load Time

3.9 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-GB

Text Length:5,511 chars

Detector Agreement:75%

Website Classification

Primary Category

travel tourism34% confidence

Type: spa

Method: ml+structural

All Detected Categories

travel tourism

34%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	68.183.64.107	Frankfurt am Main, Hesse, Germany	AS14061DigitalOcean, LLC
12	74.125.29.95Google · CDN	United States	AS15169Google LLC
12	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
12	142.251.14.94Google · CDN	United States	AS15169Google LLC
12	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
12	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
87	7	-	-