Security Report: safespacio.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0d5d43d8-0cc4-4c92-a0ff-a46f88a2604c Domain and IP registration (RDAP)/api/v1/rdap/0d5d43d8-0cc4-4c92-a0ff-a46f88a2604cHow often this domain was scanned/api/v1/domain/stats/safespacio.com Scan history for this domain/api/v1/domain/history/safespacio.com?limit=15

This website contacted 20 IPs in 4 countries across 16 domains to perform 87 HTTP transactions. The main domain is safespacio.com and was registered 3 years 9 months ago.

Submitted URL: https://safespacio.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate-looking VPN review blog whose WordPress install is compromised with the ClearFake/ClickFix bscSl loader and EtherHiding BSC contract reader, confirmed by roster-anchored YARA and critical IDS alerts.

Risk Factors (5)

Analyst-vetted ClearFake/ClickFix bscSl fake WordPress plugin loader injected into page HTML

EtherHiding second stage: eth_call get() on a BSC testnet contract, ABI-decode, base64-decode and script injection

Critical network IDS malware alerts (EtherHiding Exfil)

Outbound connections to BSC testnet RPC nodes from page scripts

Primary domain flagged for malware in threat intelligence (single-source)

Domain age information unavailable

Details

Page Title

Home - Safe Space

Scan Type

public

Favicon Hash

MMH3: -1092773677

MD5: c2fdd509f16f70819540365f6bc0ff4e

Domain Name Analysis

Domain 'safespacio.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'safespacio' spans 10 characters split between 5 vowels and five consonants. Word splitting yields 3 words: safe, spa, cio. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.28s

Total Load Time

1.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:2,325 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software55% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

55%

education learning

55%

news/blog

35%

corporate

35%

documentation technical

31%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	92.113.16.166	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
4	92.113.16.173	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
4	142.251.13.95Google · CDN	United States	AS15169Google LLC
4	142.251.20.94Google · CDN	United States	AS15169Google LLC
4	190.115.18.105	United Arab Emirates	AS59692IQWeb FZ-LLC
4	192.0.77.37	San Francisco, California, United States	AS2635Automattic, Inc
4	142.251.14.97Google · CDN	United States	AS15169Google LLC
4	192.0.77.2	San Francisco, California, United States	AS2635Automattic, Inc
4	192.0.76.3	San Francisco, California, United States	AS2635Automattic, Inc
4	35.71.129.99Aws · CLOUD	United States	AS16509Amazon.com, Inc.
87	20	-	-