Security Scan: https://www.pachamamaroteisland.com

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9e067803-fd75-4a20-a9b9-ee6faf374943 Domain and IP registration (RDAP)/api/v1/rdap/9e067803-fd75-4a20-a9b9-ee6faf374943 Certificate Transparency/api/v1/ct/pachamamaroteisland.com How often this domain was scanned/api/v1/domain/stats/pachamamaroteisland.com Scan history for this domain/api/v1/domain/history/pachamamaroteisland.com?limit=15

This website contacted 6 IPs in 3 countries across 7 domains to perform 15 HTTP transactions. The main domain is pachamamaroteisland.com and was registered 5 years ago.

Submitted URL: https://www.pachamamaroteisland.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised resort site injected with the ClickFix WinX overlay kit and an EtherHiding blockchain loader; critical YARA, analyst-vetted kit roster and CRITICAL IDS malware alerts confirm malicious code delivery.

Risk Factors (7)

Injected fake 'Human Verification' / Cloudflare-style overlay instructing Windows users to press Win+X, open Terminal, paste and press Enter (ClickFix malware delivery)

Obfuscated script performing EtherHiding — retrieves the next-stage payload address from a blockchain smart contract

Injected WordPress backdoor code (OCR) creating a 'root' administrator user with a hardcoded password

Unrelated casino/1xbet SEO spam link text injected into the page content

Cross-origin POST to unranked ferma.seo-solutions.eu.cc beaconing with the site host and URI

Unranked third-party script host browse-codes-enter.beer serving JavaScript to the page

Compromised legitimate resort site being used as malware distribution infrastructure

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Favicon Hash

MMH3: 997934536

MD5: 0b54e632a5f28781cfa305dff78d4b64

Domain Name Analysis

The domain 'www.pachamamaroteisland.com' uses the commercial generic top-level domain (.com) with subdomain 'www'. Its registrable label 'pachamamaroteisland' stretches across 19 characters holding eight vowels versus eleven consonants. Word splitting yields 5 words: pac, ham, amaro, te, island. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.06s

Total Load Time

2.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

Text Length:7,399 chars

Detector Agreement:67%

Website Classification

Primary Category

documentation technical41% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

41%

technology software

38%

cryptocurrency blockchain

36%

healthcare medical

35%

finance banking

31%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	89.46.109.28	Arezzo, Tuscany, Italy	AS31034Aruba S.p.A.
2	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.21.58.227Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
2	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
2	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
15	6	-	-