Security Scan Report: asturigin.com

Redirected to:
https://www.asturigin.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 20 IPs in 3 countries across 14 domains to perform 58 HTTP transactions. The main domain is asturigin.com and was registered 3 years 9 months ago.

Submitted URL: https://asturigin.com

Effective URL:
https://www.asturigin.com/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 94%

10
Risk Score

Legitimate-brand site compromised by the ClickFix 'Human Verification' kit: injected YARA-confirmed overlay plus an EtherHiding blockchain loader tricking Windows users into pasting malicious commands. Avoid; do not interact.

Risk Factors (5)
Injected fake Cloudflare 'Human Verification' overlay instructing Windows visitors to open Terminal (Win+X) and paste a command — ClickFix social-engineering / malware delivery
EtherHiding: page-resident script resolves its payload host from a blockchain contract to evade takedown
Multi-source content-malware threat-intel match on the scanned primary domain (clearfake / unknown loader)
8 CRITICAL and 1 HIGH network IDS alerts (EtherHiding exfiltration, ClickFix domain, exploit-kit activity, Spamhaus DROP)
Obfuscated loader script with concealed threat-feed endpoints and unranked third-party script host browse-codes-enter.beer
Domain age information unavailable

Details

Page Title

Verifica dell'età - ASTURIGIN - ESSENZE MEDITERRANEE

Scan Type

public

Domain Name Analysis

Domain 'asturigin.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'asturigin' is 9 characters long split between four vowels and five consonants. Segmentation suggests 4 words: a, stu, rig, in. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://asturigin.com

Page Load Overview

3.35s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:7,627 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2089.46.110.48Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
2104.18.19.62Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2132.145.155.63Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
2104.18.23.56Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
2142.251.20.97Google · CDNUnited States
AS15169Google LLC
2192.178.183.94Google · CDNUnited States
AS15169Google LLC
2104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
235.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2142.251.150.119Google · CDNUnited States
AS15169Google LLC
5820--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15444733337055279B28E89CA5112720E60F5DA97E43524ACF7E768EEBF6CC8234B5532

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:nYDMah76OB+VK08/hkI+/tSG7zJBOlx4C4g:oMah76OB+o085kBtSG7zJB+yK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:257756:qAY+oPILbdQQVALBYNmVIYIJEmA4EoBFFiImRCVPcFCAIEPFggHYpWgKBDKiYQCJAGriQ0FGqFANJgDFFo6oILgEgMCwYwNA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffff00
Perceptual Hash:f7a85caa57a85c88
Difference Hash:0008000c0c08c0c8
Wavelet Hash:0f0f3f27e7e70000
Color Hash:#c5878c

Other Hashes

Crop Resistant:0008000c0c08c0c8

Scan History

Scan history not available

Unable to load historical scan data