Security Report: buymotorhomes.co.uk - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b0fbdb96-4092-4992-ab95-ffbaead9e7ef Domain and IP registration (RDAP)/api/v1/rdap/b0fbdb96-4092-4992-ab95-ffbaead9e7efHow often this domain was scanned/api/v1/domain/stats/buymotorhomes.co.uk Scan history for this domain/api/v1/domain/history/buymotorhomes.co.uk?limit=15

This website contacted 26 IPs in 4 countries across 15 domains to perform 133 HTTP transactions. The main domain is buymotorhomes.co.uk and was registered 12 years ago.

Submitted URL: https://buymotorhomes.co.uk

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Legitimate-looking 12-year-old motorhome buyer whose WordPress page is compromised: CRITICAL ClickFix/ErrTraffic YARA hits, EtherHiding blockchain loader and critical malware IDS alerts. Do not visit or run any copied commands.

Risk Factors (6)

Critical ClickFix fake-CAPTCHA / Terminal-paste social-engineering kit injected into the page

ErrTraffic/Exvicy obfuscated WordPress loader (Base64 XOR blob executed via new Function) present in HTML

EtherHiding: malware stage address retrieved from a smart contract, evading static blocklists

Obfuscated script hides known-attacker blockchain RPC hosts (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co)

Critical IDS malware/exfiltration alerts (EtherHiding Exfil M2)

Threat-feed-flagged third-party script host interseq.at (unranked) contacted via sendBeacon

Domain age information unavailable

Details

Page Title

Motorhome Sales | Instant Cash Offers for Your Vehicle

Scan Type

public

Favicon Hash

MMH3: -11924366

MD5: 6e1ece916598a29e7ba2a4a83b7e9600

Domain Name Analysis

Domain 'buymotorhomes.co.uk' uses the United Kingdom country-code top-level domain (.co.uk) without a subdomain. Count 13 characters in 'buymotorhomes' holding five vowels versus 8 consonants. Splitting it apart reveals 3 words: buy, motor, homes. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.01s

Total Load Time

3.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:7,782 chars

Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence

Type: spa

Method: structural

All Detected Categories

No categories detected

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	160.153.0.101Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
5	208.115.201.238	Frankfurt am Main, Hesse, Germany	AS46475Limestone Networks, Inc.
5	142.251.110.95Google · CDN	United States	AS15169Google LLC
5	13.226.244.127Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
5	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	23.62.15.26Akamai · CDN	Berlin, State of Berlin, Germany	AS20940Akamai International B.V.
5	142.251.14.94Google · CDN	United States	AS15169Google LLC
5	16.15.47.0Aws · CLOUD	Boardman, Oregon, United States	AS16509Amazon.com, Inc.
5	104.21.85.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
133	26	-	-