Security Report: agoraturismo.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b6d3ffc6-cdc5-47e4-a548-46d356407d18 Domain and IP registration (RDAP)/api/v1/rdap/b6d3ffc6-cdc5-47e4-a548-46d356407d18How often this domain was scanned/api/v1/domain/stats/agoraturismo.com Scan history for this domain/api/v1/domain/history/agoraturismo.com?limit=15

This website contacted 32 IPs in 4 countries across 18 domains to perform 102 HTTP transactions. The main domain is agoraturismo.com and was registered 13 years ago.

Submitted URL: https://agoraturismo.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised Italian travel magazine now serving an injected ClickFix fake-Cloudflare overlay (Win+X -> Terminal paste), CRITICAL YARA/IDS hits for EtherHiding exfil and a two-feed malware flag on its own domain. Do not interact.

Risk Factors (7)

Injected ClickFix Win+X/Terminal fake-verification overlay (CRITICAL phishing kit, roster-anchored YARA match)

Fake Cloudflare 'Human Verification' / 'Authorize your browser' / Ray ID strings impersonating Cloudflare's interstitial

ET MALWARE EtherHiding Exfil M2 (x2, CRITICAL) — blockchain-based loader/exfiltration traffic

Primary domain flagged as 'clearfake' malware by two independent threat-intelligence feeds

Suspicious Web3 RPC endpoints (rpc-mainnet.matic.quiknode.pro, rpc.ankr.com) and Ethereum contract getDomain() calls

OpenRed/unsolicited outbound traffic to a Spamhaus DROP-listed range; 5 eval() and 24 Function() dynamic-code calls in page scripts

Page is a compromised legitimate travel magazine (agoraturismo.com) — injected content served to all visitors

Domain age information unavailable

Details

Page Title

AGORATURISMO - Online Magazother network

Scan Type

public

Favicon Hash

MMH3: 1649180555

MD5: 9af7d63dbfd0510419a3d150d6dfa486

Domain Name Analysis

You're looking at domain 'agoraturismo.com' on the commercial generic top-level domain (.com) with no subdomain. Count 12 characters in 'agoraturismo' holding six vowels versus 6 consonants. Breaking it apart gives two words: agora, turismo. The median word length lands at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.04s

Total Load Time

3.3 MB

Total Size

Language Analysis

Primary Language

🇮🇹Italian

Code: it

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:5,518 chars

Detector Agreement:50%

Website Classification

Primary Category

travel tourism88% confidence

Type: spa

Method: ml+structural

All Detected Categories

travel tourism

88%

education learning

77%

adult content

58%

news media journalism

53%

entertainment media

46%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	81.88.53.98	Italy	AS39729Register S.p.A.
3	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.110.95Google · CDN	United States	AS15169Google LLC
3	185.152.64.17Datacamp · CDN	Prague, Prague, Czech Republic	AS60068Datacamp Limited
3	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
3	142.251.13.100Google · CDN	United States	AS15169Google LLC
3	142.251.14.94Google · CDN	United States	AS15169Google LLC
3	142.251.153.4Google · CDN	United States	AS15169Google LLC
3	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
3	185.111.111.157	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
102	32	-	-