ScanMalware.com

Security Scan Report: www.metropolitan-touring.com

Submitted: Oct 15, 2025, 8:18:15 AMCompleted: Oct 15, 2025, 8:19:17 AMpubliccompleted
Loading additional data...

Summary

This website contacted 31 IPs in 2 countries across 9 domains to perform 126 HTTP transactions. The main domain is metropolitan-touring.com and was registered NaN years ago.

Submitted URL: https://www.metropolitan-touring.com/peru/places/lima/

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Site contains hidden/disguised password fields, indicating a phishing threat despite its age.

Risk Factors
Disguised password fields collecting credentials
Hidden password field
Unicode evasion technique in form inputs
Domain age information unavailable

Details

Page Title

Lima, Peru: Everything you need to know before your trip

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

news media journalism

(72%)

Domain Information

The domain 'www.metropolitan-touring.com' uses the commercial generic top-level domain (.com) and includes subdomain 'www'. Count 20 characters in 'metropolitan-touring' with eight vowels and 11 consonants; it also includes 1 hyphen. Splitting it apart reveals two words: metropolitan, touring. Average segment length settles at 9.5 characters. Most frequently, 'metropolitan' shows up in English. It also appears in Indonesian and Chinese (Pinyin) contexts.

Screenshot

Security scan screenshot of https://www.metropolitan-touring.com/peru/places/lima/

Page Load Overview

34.01s
Total Load Time
126
HTTP Requests
9
Domains
738 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:18,796 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism72% confidence
Type: webapp
Method: ml+structural

All Detected Categories

news media journalism
72%
travel tourism
68%
adult content
35%
government public service
28%
news/blog
20%

Detected Features

OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6104.18.19.62United States
AS13335CLOUDFLARENET
434.199.77.115Ashburn, Virginia, United States
AS14618AMAZON-AES
43.160.150.46United States
AS16509AMAZON-02
4172.64.148.115United States
AS13335CLOUDFLARENET
444.198.242.13Ashburn, Virginia, United States
AS14618AMAZON-AES
4162.159.137.54United States
AS13335CLOUDFLARENET
4142.250.186.131United States
AS15169GOOGLE
413.226.244.36United States
AS16509AMAZON-02
4162.159.136.54United States
AS13335CLOUDFLARENET
4142.250.186.132United States
AS15169GOOGLE
12631--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D234D5713942603A31AF56CFA1176A4D6EC2E7CFCB92A5D1E2F4832486F9D91B7F0160

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:kpMvIS4a/84u7f4lO4v4K4/4yv2xg4j0Np37R4s+PIZLBLN9LnbcaLy+UtLPTnUD:kpMv7xE7RN+PIb+jKBQS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:238817:IaKBABsqWA5gJBBpSCQBBIBsERCgMQAhFFLrIFgqDIIUEA1GgEdQmgIwQCSCCGbAWCkQgAGiwWJYEQ0mUDAdQFSA0LBqCAgg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff8eecf99000000
Perceptual Hash:c9f14a8ab4b093be
Difference Hash:4362989e22e1e125
Wavelet Hash:fff9eeef9b000000
Color Hash:#53ac8d

Other Hashes

Crop Resistant:4362989e22e1e125,b28e91554585ae90,a2a24e53391a8292,6302988e62e1e124,0707033033130c03

Scan History

Scan history not available

Unable to load historical scan data