Security Report: tulumediaok.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9a020b4e-9f0d-4331-ae83-39a047ff9ca0 Domain and IP registration (RDAP)/api/v1/rdap/9a020b4e-9f0d-4331-ae83-39a047ff9ca0How often this domain was scanned/api/v1/domain/stats/tulumediaok.com Scan history for this domain/api/v1/domain/history/tulumediaok.com?limit=15

This website contacted 13 IPs in 3 countries across 10 domains to perform 30 HTTP transactions. The main domain is tulumediaok.com and was registered 3 months ago.

Submitted URL: https://tulumediaok.com

AI Security Verdict

High Risk

Confidence: 92%

Risk Score

Legitimate-looking agency site that has been compromised: injected ClickFix/EtherHiding loader pulls a payload address from a Polygon contract and shows a fake 'Human Verification' overlay pushing Windows users to paste Terminal commands. Avoid.

Risk Factors (5)

Compromised site injecting a ClickFix-style fake 'Human Verification' overlay that instructs Windows users to open Terminal and paste commands

EtherHiding: malicious payload address fetched from a Polygon smart contract, making takedown harder

Obfuscated script concealing known-attacker blockchain RPC hosts

CRITICAL network IDS malware/exfiltration alerts during page load

Primary domain itself tagged as malware (iclickfix) by a threat feed

Domain age information unavailable

Details

Page Title

Inicio - tuluweb

Scan Type

public

Favicon Hash

MMH3: -1639089379

MD5: 74f5314fe1e4d532b3a99a0fedc055d4

Domain Name Analysis

The domain 'tulumediaok.com' uses the commercial generic top-level domain (.com) with no subdomain. Its registrable label 'tulumediaok' stretches across 11 characters containing six vowels alongside five consonants. Tokenizing the label suggests three words: tulu, media, ok. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.77s

Total Load Time

601 KB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:4,805 chars

Detector Agreement:67%

Website Classification

Primary Category

social media network58% confidence

Type: spa

Method: ml+structural

All Detected Categories

social media network

58%

corporate business

53%

corporate

35%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	66.97.42.64	Rosario, Santa Fe, Argentina	AS27823Dattatec.com
2	142.251.13.95Google · CDN	United States	AS15169Google LLC
2	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.14.94Google · CDN	United States	AS15169Google LLC
2	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	208.115.201.238	Frankfurt am Main, Hesse, Germany	AS46475Limestone Networks, Inc.
2	192.0.77.48	San Francisco, California, United States	AS2635Automattic, Inc
2	192.178.170.95Google · CDN	United States	AS15169Google LLC
2	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
30	13	-	-