Security Report: albericdervault.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e4f0d53a-c4c0-4440-a470-9fd3d3d343f3 Domain and IP registration (RDAP)/api/v1/rdap/e4f0d53a-c4c0-4440-a470-9fd3d3d343f3How often this domain was scanned/api/v1/domain/stats/albericdervault.com Scan history for this domain/api/v1/domain/history/albericdervault.com?limit=15

This website contacted 16 IPs in 2 countries across 13 domains to perform 108 HTTP transactions. The main domain is albericdervault.com and was registered 1 year 1 month ago.

Submitted URL: https://albericdervault.com

Effective URL:

https://www.albericdervault.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 94%

Risk Score

Compromised architect site serving an EtherHiding loader plus a fake CAPTCHA that tells visitors to paste PowerShell commands (ClickFix). CRITICAL malware IDS alerts and domain flagged as iclickfix malware. Do not interact.

Risk Factors (5)

Blockchain-based (EtherHiding) staged payload retrieval visible only after deobfuscation

ClickFix-style fake verification page coaxing users into running PowerShell commands

CRITICAL network IDS malware alerts (EtherHiding Exfil)

Primary domain itself flagged as ClickFix malware in threat intelligence

Obfuscated JavaScript with dynamic code execution hiding network sink hosts

Domain age information unavailable

Details

Page Title

Albéric DERVAULT | Architecte du Patrimoine

Scan Type

public

Domain Name Analysis

Domain 'albericdervault.com' uses the commercial generic top-level domain (.com) without a subdomain. Count 15 characters in 'albericdervault' with six vowels and 9 consonants. Segmentation suggests 3 words: alberic, der, vault. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

oroba.it Your browser is being verified. Please wait a few seconds. This process is automatic. Soon you will be redirected to the requested page. Aruba S.p.A.- PI. 01573850516 - Copyright ©2025 All...

Page Load Overview

3.05s

Total Load Time

8.0 MB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:37%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:4,727 chars

Detector Agreement:80%

Language mismatch: Declared as it-IT but detected as fr

Website Classification

Primary Category

real estate property27% confidence

Type: spa

Method: ml+structural

All Detected Categories

real estate property

27%

corporate

25%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
18	89.46.107.23	Arezzo, Tuscany, Italy	AS31034Aruba S.p.A.
6	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	52.223.48.152Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
6	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	35.71.129.99Aws · CLOUD	United States	AS16509Amazon.com, Inc.
108	16	-	-