Security Scan Report: sutienda.es

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 3 countries across 3 domains to perform 6 HTTP transactions. The main domain is sutienda.es.

Submitted URL: https://sutienda.es

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Compromised site serving a ClickFix fake Cloudflare 'Human Verification' overlay that tells Windows users to paste Terminal commands — a blockchain-loaded malware kit confirmed by YARA, kit roster and a CRITICAL IDS EtherHiding alert.

Risk Factors (6)
Known ClickFix fake-CAPTCHA overlay kit injected into the page
Critical YARA detections for ClickFix Win+X Terminal overlay and packed blockchain loader
Blockchain-based (EtherHiding) command-and-control resolution via Polygon smart contract
Instruction to paste attacker-supplied commands into Windows Terminal — direct malware execution path
Impersonation of Cloudflare's verification UI on a non-Cloudflare page
Obfuscated script hiding known-attacker RPC hosts and loading content from unranked cloud-browse.codes
Domain age information unavailable

Details

Page Title

sutienda.esother network

Scan Type

public

Domain Name Analysis

You're looking at domain 'sutienda.es' on the Spanish country-code top-level domain (.es) without a subdomain. Its registrable label 'sutienda' stretches across 8 characters containing four vowels alongside four consonants. Word splitting yields 4 words: s, uti, end, a. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sutienda.es

Page Load Overview

1.61s
Total Load Time
41 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:641 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software43% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
43%
cryptocurrency blockchain
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2185.195.98.71Madrid, Madrid, Spain
AS206102Advanced Software Production Line, S.L.
235.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
63--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B314AA6383E1468EE3D106EA810D712B59F6DA332879A0FDFB5255DBF83E89344B5321

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:p0FE80FE80FE80FE80FE80FE80FE80FE80FE80FE80FE80FE80FE80FE80FE80F9:rvRd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:206834:OJKLEbtCSDKkAEzQoSimBJaiCYJugsAoJgAIIWNIDwsBKgwOHxA0yUCqTIjFgIIYIFhWw0ARGHAkgyzWlIRASADYqMVxTiks

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfcfc3c3fffffff7
Perceptual Hash:b03993c7c644c6cf
Difference Hash:1818163600000008
Wavelet Hash:3f0f0303f0f0f700
Color Hash:#bfbb40

Other Hashes

Crop Resistant:1818163600000008

Scan History

Scan history not available

Unable to load historical scan data