Security Scan Report: pascualini.com.ar

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 3 countries across 4 domains to perform 175 HTTP transactions. The main domain is pascualini.com.ar.

Submitted URL: https://pascualini.com.ar

AI Security Verdict

High Risk

Confidence: 95%

9
Risk Score

Legitimate Hyundai dealership site that has been compromised: its HTML carries a ClickFix/AMOS stealer loader (hunting rule CRITICAL, kit roster, IDS CRITICAL) pulling scripts from silverrogpuia.pro. Do not visit or click pop-ups.

Risk Factors (4)
Compromised legitimate site injecting a ClickFix/AMOS macOS stealer loader
Page loads attacker-controlled script from unranked third-party host silverrogpuia.pro
Cross-origin sendBeacon from page scripts to that flagged host
eval() usage (2 calls) alongside the injected loader is consistent with obfuscated staging
Domain age information unavailable

Details

Page Title

Pascualini | Service Oficial Hyundai

Scan Type

public

Domain Name Analysis

The domain name 'pascualini.com.ar' uses the Argentine country-code top-level domain (.com.ar) and has no subdomain. The core label 'pascualini' covers 10 characters split between 5 vowels and 5 consonants. Tokenizing the label suggests five words: pas, cu, al, in, i. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

osevwm HYUNDAI HORARIO DE ATENCIÓN EXTENDIDO: ES) AE 8.30 A 13/14 A 17.30HS. 3 eg 351 236-5782 [REPUESTOS] eg) 351 620-5915 [TURNOS Y REFBRAG! i=’ NOSOTROS REPUESTOS CLIENTES HYUNDAI ——— ee

Page Load Overview

13.47s
Total Load Time
3.4 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es-AR
Text Length:1,460 chars
Detector Agreement:50%

Website Classification

Primary Category

documentation technical99% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
99%
government public service
99%
news media journalism
99%
cryptocurrency blockchain
99%
technology software
97%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
46167.250.5.105Argentina
AS264649NUT HOST SRL
43142.251.110.95Google · CDNUnited States
AS15169Google LLC
43147.45.37.168Russia
AS203273NetCrafters OU
43142.251.20.94Google · CDNUnited States
AS15169Google LLC
1754--

Detected Technologies3

WordPressv5.5.24
100%
JQueryv6.11.1
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16E83B573AC594426829281C4E059AF0CE1EAE13FC755C998F7FD8678ABCDEE8153324D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:g7/2vLOn+eHxWx8nqHjGpBgMYm9sTIDVx8ksXBNkDrN327i4tczLM56nE7g78OiC:gz2vLOn+eHxWx8nAjGFYm9sTIDVxb32U

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:87752:O0AOAKg4ABGBIREMIDgC9HcAiQsFaYlIBQ3JEXICgADYBhCcEAQAFSU2T4ACMCDC7AIDoGCFojfAFEJQUQAjAkNjCkRwBPBG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00fefc0880c0fcfb
Perceptual Hash:fd13272e2d0a645e
Difference Hash:635898b137044982
Wavelet Hash:00fefc0880c7fcf3
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data