Security Report: marathonspiritueldefes.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c0467ac2-78ba-4ff0-a47a-3623c861d766 Domain and IP registration (RDAP)/api/v1/rdap/c0467ac2-78ba-4ff0-a47a-3623c861d766 Certificate Transparency/api/v1/ct/marathonspiritueldefes.com How often this domain was scanned/api/v1/domain/stats/marathonspiritueldefes.com Scan history for this domain/api/v1/domain/history/marathonspiritueldefes.com?limit=15

This website contacted 27 IPs in 5 countries across 18 domains to perform 261 HTTP transactions. The main domain is marathonspiritueldefes.com and was registered 21 years ago.

Submitted URL: https://marathonspiritueldefes.com/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised Fès marathon site serving a ClickFix 'Human Verification' overlay that impersonates Cloudflare and instructs Windows users to paste a Terminal command, loading an EtherHiding blockchain malware loader.

Risk Factors (6)

Known ClickFix malware kit injected into the site (analyst-vetted, CRITICAL)

Fake Cloudflare 'Human Verification' overlay impersonating Cloudflare branding

Social-engineering instructions telling Windows users to open Terminal and paste a clipboard command

Multiple CRITICAL IDS malware/exploit-kit alerts (EtherHiding exfiltration, AMOS loader, ErrTraffic Beer Cluster)

Threat-intel reports of malware on the primary domain and on several loaded third-party resources

On-page blockchain smart-contract/RPC resolution consistent with EtherHiding loader retrieval

Domain age information unavailable

Details

Page Title

Accueill - Marathon Spiritual de Fès 2027

Scan Type

public

Favicon Hash

MMH3: 858798556

MD5: 66e92689bf4da4f4d8cc0782d06d7a11

Domain Name Analysis

You're looking at domain 'marathonspiritueldefes.com' on the commercial generic top-level domain (.com) with no subdomain. Its registrable label 'marathonspiritueldefes' stretches across 22 characters with nine vowels and 13 consonants. Tokenizing the label suggests 5 words: marathon, spirit, uel, de, fes. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

44.94s

Total Load Time

9.4 MB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR

Text Length:4,945 chars

Detector Agreement:50%

Website Classification

Primary Category

government public service53% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

53%

corporate

35%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
27	193.203.239.77	France	AS210403Groupe LWS SARL
9	142.251.110.95Google · CDN	United States	AS15169Google LLC
9	77.221.141.228	Stockholm, Stockholm County, Sweden	AS210644Aeza Group LLC
9	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	146.19.24.104	Poland	AS201814MEVSPACE sp. z o.o.
9	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
9	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
261	27	-	-