Security Scan Report: www.asturigin.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 3 countries across 13 domains to perform 57 HTTP transactions. The main domain is asturigin.com and was registered 3 years 9 months ago.

Submitted URL: https://www.asturigin.com

AI Security Verdict

Confirmed Scam

Confidence: 94%

10
Risk Score

Legitimate-brand site compromised by the ClickFix 'Human Verification' kit: injected YARA-confirmed overlay plus an EtherHiding blockchain loader tricking Windows users into pasting malicious commands. Avoid; do not interact.

Risk Factors (5)
Injected fake Cloudflare 'Human Verification' overlay instructing Windows visitors to open Terminal (Win+X) and paste a command — ClickFix social-engineering / malware delivery
EtherHiding: page-resident script resolves its payload host from a blockchain contract to evade takedown
Multi-source content-malware threat-intel match on the scanned primary domain (clearfake / unknown loader)
8 CRITICAL and 1 HIGH network IDS alerts (EtherHiding exfiltration, ClickFix domain, exploit-kit activity, Spamhaus DROP)
Obfuscated loader script with concealed threat-feed endpoints and unranked third-party script host browse-codes-enter.beer
Domain age information unavailable

Details

Page Title

Verifica dell'età - ASTURIGIN - ESSENZE MEDITERRANEE

Scan Type

public

Domain Name Analysis

The domain 'www.asturigin.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'www'. The registrable portion 'asturigin' spans 9 characters split between 4 vowels and five consonants. Word splitting yields four words: a, stu, rig, in. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.asturigin.com

Page Load Overview

2.88s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:7,627 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
689.46.110.48Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
3104.18.18.62Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
3104.18.22.56Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
3142.251.14.97Google · CDNUnited States
AS15169Google LLC
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
3172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
335.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
5718--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15944733337055279B28E89CA5112720E60F5DA97E43524ACF7E768EEBF6CC8234B5532

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:nYDtah76OB+VK08/hkI+/tSG7zYBOlx4Cyg:otah76OB+o085kBtSG7zYB+y0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:257756:ASiJkTMggsBaMELCJCsCJQJAGkywMCUPEAYyDGUFBUIk8oDBaBC6IAkYDDhgAARlIGhrFaETiAJRUwtWIASwrXDFhElWBEgU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffff00
Perceptual Hash:f7a85caa57a85c88
Difference Hash:0008000c0c08c0c8
Wavelet Hash:0f0f3f27e7e70000
Color Hash:#bbe06c

Other Hashes

Crop Resistant:0008000c0c08c0c8

Scan History

Scan history not available

Unable to load historical scan data