Security Report: rfmoto.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fde6923a-b5d1-4bb6-bcb2-468262a85269 Domain and IP registration (RDAP)/api/v1/rdap/fde6923a-b5d1-4bb6-bcb2-468262a85269How often this domain was scanned/api/v1/domain/stats/rfmoto.com Scan history for this domain/api/v1/domain/history/rfmoto.com?limit=15

This website contacted 23 IPs in 3 countries across 13 domains to perform 181 HTTP transactions. The main domain is rfmoto.com and was registered 23 years ago.

Submitted URL: https://rfmoto.com

Effective URL:

https://www.rfmoto.com/

Redirected

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Legitimate Italian quad/moto dealer whose site is compromised: an IClickFix EtherHiding loader is injected, confirmed by a CRITICAL malware IDS alert and analyst-vetted kit roster. Avoid visiting until cleaned.

Risk Factors (5)

IClickFix EtherHiding loader injected into the page (known malicious kit, CRITICAL severity)

CRITICAL IDS alert for malware EtherHiding exfiltration

Obfuscated script that fetches its payload from a blockchain smart contract

Obfuscation hides known-attacker hosts (0xrpc.io, 1rpc.io, gateway.tenderly.co)

Page loads resources from zvh3.com, flagged as malicious by 3 independent threat feeds

Domain age information unavailable

Details

Page Title

Home - RF MOTO

Scan Type

public

Favicon Hash

MMH3: -356203570

MD5: f21be23a6f12a4817dbb4456afe9879a

Domain Name Analysis

The domain name 'rfmoto.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'rfmoto' is 6 characters long containing two vowels alongside 4 consonants. Segmentation suggests two words: rf, moto. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

13.84s

Total Load Time

5.3 MB

Total Size

Language Analysis

Primary Language

🇮🇹Italian

Code: it

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:12,453 chars

Detector Agreement:67%

Website Classification

Primary Category

corporate business57% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

corporate business

57%

documentation technical

48%

news media journalism

46%

corporate

35%

news/blog

20%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
27	95.141.43.164	Milan, Lombardy, Italy	AS49367Seflow s.r.l.
7	142.251.20.95Google · CDN	United States	AS15169Google LLC
7	192.178.183.94Google · CDN	United States	AS15169Google LLC
7	77.95.141.169	Milan, Lombardy, Italy	AS28716Retelit Digital Services S.p.A.
7	192.0.77.48	San Francisco, California, United States	AS2635Automattic, Inc
7	146.19.24.104	Poland	AS201814MEVSPACE sp. z o.o.
7	172.67.175.246Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	142.251.14.139Google · CDN	United States	AS15169Google LLC
7	142.251.153.119Google · CDN	United States	AS15169Google LLC
7	142.251.20.94Google · CDN	United States	AS15169Google LLC
181	23	-	-