Security Scan Report: grupointerfasesl.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 25 IPs in 3 countries across 19 domains to perform 95 HTTP transactions. The main domain is grupointerfasesl.com and was registered 16 years ago.

Submitted URL: https://grupointerfasesl.com

AI Security Verdict

Confirmed Scam

Confidence: 94%

9
Risk Score

Legitimate-looking WordPress site for a Canary Islands electrician that has been compromised: it injects ClickFix/FileFix fake-CAPTCHA and fake Microsoft sign-in lures, clipboard-execution payloads, and EtherHiding C2 traffic. Do not paste or run anything shown on this page.

Risk Factors (8)
Analyst-vetted ClickFix/FileFix phishing kit code injected into the page (5 roster sightings, CRITICAL and HIGH)
13 high-precision hunting-rule hits for fake-CAPTCHA clipboard-execution kits
EtherHiding exfiltration detected by IDS (16 CRITICAL ET MALWARE alerts) alongside blockchain RPC connections
Google Safe Browsing: Unwanted Software
Primary domain reported in threat intelligence as malicious 'iclickfix' malware
Third-party script hosts with ClearFake/ClickFix threat-intel history (herosdvakit.org, interseq.at)
Fake Microsoft account/SmartScreen verification overlay instructing visitors to paste a copied command
Suspicious obfuscated JavaScript (eval and Function constructor usage)
Domain age information unavailable

Details

Page Title

Interfase Electricidad y Telecomunicaciones – Tu instaladora en Canarias

Scan Type

public

Domain Name Analysis

The domain name 'grupointerfasesl.com' uses the commercial generic top-level domain (.com) and has no subdomain. Count 16 characters in 'grupointerfasesl' split between 6 vowels and ten consonants. Segmentation suggests 5 words: grupo, inter, f, as, esl. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

fe ie > Quienes somos Gem Gm Interfase electricidad y telecomunicaciones sl, e ecomunicaciones S. 1. NT ey A A A ey A ey AN A Ten Tey A ey AN rey A ee A ee A ey A ee A A A Tee Tey ey A Tere Tey ee...

Page Load Overview

6.35s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:2,251 chars
Detector Agreement:100%

All Detected Languages

🇪🇸es(89%)🇺🇸en(10%)🇫🇷fr(2%)

Website Classification

Primary Category

corporate business45% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
45%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
50217.160.0.63Germany
AS8560IONOS SE
3172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.16.248.249Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.127.95Google · CDNUnited States
AS15169Google LLC
3172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
364.130.32.46Frankfurt am Main, Hesse, Germany
AS20326TeraSwitch Networks Inc.
3192.178.183.94Google · CDNUnited States
AS15169Google LLC
3104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9525--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13A2518A3DB92161D81055DA3CFBA7B3EA9C5C8079E18D52EBF2F22F2FF6C1524251610

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:oDZg8fid1Hz3GrzXzidzHrMU+oya22QubU4Agi0DuW0O0MvhySPaaitpUIu5dm:oDO7T3ESLRsa2TBN2aWLvAIalATm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1024806:EgRgz1wFMivIgPXUCkCCACJBaAAaloA2BUQwJAlABbgkA0JAGKRJCYoQhCARpJ2BQcBxJAXFCAaIAJ6tqHRakAHJ2xWAHRBG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018005a18001800
Perceptual Hash:993366cccc3333cc
Difference Hash:88b0ccb2b2ccb000
Wavelet Hash:007e665b7e6e7e00
Color Hash:070020001c0

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data