Security Scan Report: aqc.cat

Site favicon
Submitted: Completed: publiccompleted
This website contacted 14 IPs in 3 countries across 10 domains to perform 118 HTTP transactions. The main domain is aqc.cat and was registered 10 years ago.

Submitted URL: https://aqc.cat

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Established Catalan publisher that appears compromised: CRITICAL malware IDS alerts (ClickFix/EtherHiding), blockchain RPC exfil traffic, and a malware threat-intel hit on its own domain. No forms, so no direct phishing.

Risk Factors (5)
CRITICAL IDS malware alerts naming a ClickFix domain in TLS SNI on a page whose visible text includes a 'Human Verification' prompt
EtherHiding exfiltration alerts plus blockchain RPC and Ethereum contract calls from a bookstore page that has no legitimate need for them
Threat-intel match on the primary domain itself (unknown malware loader)
Malicious third-party host (checkyoubrowse.codes) loaded, corroborated by two independent feeds
Likely JavaScript obfuscation heuristic in network traffic
Domain age information unavailable

Details

Page Title

Poemaris - AQC

Scan Type

public

Domain Name Analysis

Domain 'aqc.cat' uses the .cat top-level domain and has no subdomain. Count 3 characters in 'aqc' holding one vowel versus two consonants. Breaking it apart gives two words: a, qc. Expect 1.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://aqc.cat

Page Load Overview

8.45s
Total Load Time
3.0 MB
Total Size

Language Analysis

Primary Language

🇪🇸CA
Code: ca
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:ca
Text Length:5,359 chars
Detector Agreement:67%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14185.66.41.116Spain
AS19771210dencehispahard, S.L.
8142.251.13.95Google · CDNUnited States
AS15169Google LLC
8142.251.20.97Google · CDNUnited States
AS15169Google LLC
8142.251.153.119Google · CDNUnited States
AS15169Google LLC
8104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
835.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
8178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
8142.251.110.94Google · CDNUnited States
AS15169Google LLC
8142.251.20.149Google · CDNUnited States
AS15169Google LLC
8142.251.127.94Google · CDNUnited States
AS15169Google LLC
11814--

Detected Technologies12

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C92408327524243D626FB2CEA1566B0F1297DB13D60367F9F2F200A8D7DADA128D3395

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:cSxJAKGfaY4/EOAfKAiAB7A3CaQ010ph1SgGQsASnRCxL3ab3q+D+cEMkRjmGkYz:ALaYPHXWyaQ0O7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:215155:MAw2BINEAgQQCAkUz6YM0gcIFfdni4QlkwSRLeAjhEYQJfEEoJoGUAgCDcByYQIoUUDM4IgmwSAY7AgGiRAY8BAjAJxEMSAP

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fdcfc7c7c3c3ff83
Perceptual Hash:b0dbc6c866cb712c
Difference Hash:499e9f9e8e96444e
Wavelet Hash:adc3c3c3c3c33f02
Color Hash:#ac5393

Scan History

Scan history not available

Unable to load historical scan data