ScanMalware.com

Security Scan Report: upla.es

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/247d60d5-b0d3-4445-a1a7-995460db206bDomain and IP registration (RDAP)/api/v1/rdap/247d60d5-b0d3-4445-a1a7-995460db206bHow often this domain was scanned/api/v1/domain/stats/upla.esScan history for this domain/api/v1/domain/history/upla.es?limit=15
This website contacted 11 IPs in 4 countries across 9 domains to perform 49 HTTP transactions. The main domain is upla.es.

Submitted URL: https://upla.es

AI Security Verdict

Confirmed Scam

Confidence: 96%

9
Risk Score

Compromised WordPress architecture site injected with the Macfinger ClickFix AMOS stealer loader; fake verification overlay and obfuscated scripts pull malware from threat-flagged hosts. Do not visit.

Risk Factors (5)
Injected ClickFix/AMOS stealer loader on a compromised site (analyst-vetted kit roster, CRITICAL)
Fake Cloudflare/reCAPTCHA 'verification' overlay designed to get visitors to paste a malicious command
Obfuscated JavaScript concealing rotating attacker domains (campaigntracker.icu/.run/.top)
SEO-spam injections (Dutch betting page, Pin Up Casino) in an otherwise unrelated Spanish architecture template
Page scripts fetch from multiple unranked, threat-flagged hosts including js-static.cfd and egg-crusade.com
Domain age information unavailable

Details

Page Title

UPLA – Urban Playa Luz Apartments

Scan Type

public

Domain Name Analysis

The domain 'upla.es' uses the Spanish country-code top-level domain (.es) with no subdomain. The second-level label 'upla' is 4 characters long with 2 vowels and two consonants. Tokenizing the label suggests 2 words: up, la. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://upla.es

Page Load Overview

2.54s
Total Load Time
3.4 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:5,159 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software54% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
54%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9217.160.0.79Germany
AS8560IONOS SE
4185.92.183.208Riga, Riga, Latvia
AS56971Cgi Global Limited
4142.251.20.95Google · CDNUnited States
AS15169Google LLC
4147.45.37.168Russia
AS203273NetCrafters OU
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
4172.67.178.130Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
4142.251.127.84Google · CDNUnited States
AS15169Google LLC
413.33.52.208Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
4142.251.13.94Google · CDNUnited States
AS15169Google LLC
4911--

Detected Technologies7

WordPressv7.0.4
100%
MetaGenerator
100%
MySQL
50%
PHPv8.4.27
40%
Apache HTTP Server
40%
jQuery
20%
Burst
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T143E32910537848F8396BC7289589B32DFA5CA851CE4956F6F0F2E16456CCBBA09F370E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:YRZe2z5L7NyxoLbcLEEDPJV1j9rC6MnyBdx6GhmvOlRARZKbwemlUVug6mh4fAeN:282z5L7NyxoLbcLEEDPJV1j9rC6MnyBu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:147394:tJUSKGgUVDUBAIwYBYEgJ7SCUIABaRlJpAuIElUWgEsDIUBQjuQNAWVogQ1GrE6k1SgWAQiA2TgILRHQIJpgAAAoMYpAQE4A

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffc18181c1
Perceptual Hash:bbc4993cc19c3e61
Difference Hash:334c0c4b032f3b0b
Wavelet Hash:fde7e7e381818181
Color Hash:#a487c5

Other Hashes

Crop Resistant:334c0c4b032f3b0b,01e979b9af030303

Scan History

Scan history not available

Unable to load historical scan data