Security Report: alcoholth.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bd70c877-e9be-4444-8e80-d990c2cd8279 Domain and IP registration (RDAP)/api/v1/rdap/bd70c877-e9be-4444-8e80-d990c2cd8279How often this domain was scanned/api/v1/domain/stats/alcoholth.com Scan history for this domain/api/v1/domain/history/alcoholth.com?limit=15

This website contacted 8 IPs in 2 countries across 7 domains to perform 44 HTTP transactions. The main domain is alcoholth.com and was registered 3 years 2 months ago.

Submitted URL: https://alcoholth.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Confirmed ClickFix/EtherHiding page: fake Cloudflare verification overlay tricks Windows users into pasting attacker commands into Terminal to load a blockchain-hosted payload. Do not interact.

Risk Factors (5)

Known ClickFix/EtherHiding malicious kit identified by analyst-vetted YARA kit roster

Fake Cloudflare 'Human Verification' overlay impersonating Cloudflare

Social-engineering instructions to open Windows Terminal and paste/execute attacker-supplied commands

Blockchain-contract-based payload retrieval (EtherHiding) with CRITICAL IDS exfiltration alerts

Obfuscated JavaScript hiding threat-feed hosts and loading exploit-kit-associated domains (cloud-browse.codes, 178.16.52.101)

Domain age information unavailable

Details

Page Title

UEFA222 – SPORTS BETTING AND ONLINE CASINO

Scan Type

public

Favicon Hash

MMH3: 593614466

MD5: 297574a94a597a2112ac5a8d8dd4c6bb

Domain Name Analysis

The domain 'alcoholth.com' uses the commercial generic top-level domain (.com) without a subdomain. Count 9 characters in 'alcoholth' with three vowels and six consonants. Tokenizing the label suggests two words: alcohol, th. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.66s

Total Load Time

1.7 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,021 chars

Detector Agreement:50%

Website Classification

Primary Category

technology software27% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	104.21.91.234Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
5	172.67.181.232Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
5	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
44	8	-	-