Security Report: marathonspiritueldefes.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8dd25257-0fa3-44d3-ac60-5917a186b118 Domain and IP registration (RDAP)/api/v1/rdap/8dd25257-0fa3-44d3-ac60-5917a186b118 Certificate Transparency/api/v1/ct/marathonspiritueldefes.com How often this domain was scanned/api/v1/domain/stats/marathonspiritueldefes.com Scan history for this domain/api/v1/domain/history/marathonspiritueldefes.com?limit=15

This website contacted 12 IPs in 5 countries across 12 domains to perform 214 HTTP transactions. The main domain is marathonspiritueldefes.com and was registered 1 week ago.

Submitted URL: https://marathonspiritueldefes.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Legitimate 'Marathon Spirituel de Fès' site is compromised: it serves a fake Cloudflare 'human verification' ClickFix lure, an AMOS stealer loader, exploit-kit traffic, and EtherHiding blockchain exfiltration. Avoid; do not follow any on-screen steps or open Terminal.

Risk Factors

Fake Cloudflare security-check overlay instructing victims to run keyboard/terminal steps (ClickFix)

AMOS infostealer loader served (ET MALWARE AMOS ClickFix Campaign)

Exploit-kit activity (ET EXPLOIT_KIT ErrTraffic Beer Cluster Checkin)

EtherHiding blockchain-based malware/exfiltration (ET MALWARE EtherHiding Exfil M2, x5)

Multiple blockchain RPC/C2 endpoints contacted (polygon.drpc.org, 0xrpc.io, blastapi.io, nodies.app, ankr.com)

eval() and Function() constructor usage on page

Multiple third-party domains with malicious reputation loaded by the page

Domain age information unavailable

Details

Page Title

Accueill - Marathon Spiritual de Fès 2027

Scan Type

public

Favicon Hash

MMH3: 858798556

MD5: 66e92689bf4da4f4d8cc0782d06d7a11

Domain Name Analysis

The domain 'marathonspiritueldefes.com' uses the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'marathonspiritueldefes' spans 22 characters holding nine vowels versus 13 consonants. Breaking it apart gives 5 words: marathon, spirit, uel, de, fes. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

29.07s

Total Load Time

8.7 MB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR

Text Length:4,583 chars

Detector Agreement:50%

Website Classification

Primary Category

government public service53% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

53%

corporate

35%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
27	193.203.239.77	France	AS210403Groupe LWS SARL
17	142.251.127.95Google · CDN	United States	AS15169Google LLC
17	193.188.22.110	Russia	AS210644Aeza Group LLC
17	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
17	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
17	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
17	146.19.24.104	Poland	AS201814MEVSPACE sp. z o.o.
17	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
17	104.18.10.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
17	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
214	12	-	-