Security Scan: AE V&M

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7804ea47-75d0-4c00-b1b8-6f01ee1faa23 Domain and IP registration (RDAP)/api/v1/rdap/7804ea47-75d0-4c00-b1b8-6f01ee1faa23How often this domain was scanned/api/v1/domain/stats/aescenavientoymarea.es Scan history for this domain/api/v1/domain/history/aescenavientoymarea.es?limit=15

This website contacted 5 IPs in 3 countries across 5 domains to perform 30 HTTP transactions. The main domain is aescenavientoymarea.es.

Submitted URL: https://aescenavientoymarea.es

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised site serving the ClearFake EtherHiding loader: YARA-confirmed kit match plus obfuscated script hiding iclickfix malware hosts. Avoid interaction; do not load the page.

Risk Factors (5)

Known malicious kit (ClearFake) identified on the page — analyst-vetted ground truth

EtherHiding / blockchain contract loader used to fetch a second-stage payload

Heavily obfuscated JavaScript concealing command-and-control and tracking hosts

Page loads third-party resources on domains reported as 'iclickfix' malware

Domain itself reported as a malware loader; 2 intermediate redirects observed

Domain age information unavailable

Details

Page Title

AE V&M

Scan Type

public

Favicon Hash

MMH3: 530492348

MD5: dcab89b8e04bf53fcd7f6a44a8cb4fae

Domain Name Analysis

The domain name 'aescenavientoymarea.es' uses the Spanish country-code top-level domain (.es) without a subdomain. The core label 'aescenavientoymarea' covers 19 characters containing 10 vowels alongside 9 consonants. Splitting it apart reveals seven words: aes, cena, vi, en, toy, m, area. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.06s

Total Load Time

4.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:36%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:81 chars

Detector Agreement:100%

Language mismatch: Declared as es but detected as en

Website Classification

Primary Category

technology software62% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

62%

gambling betting

60%

cryptocurrency blockchain

50%

adult content

39%

documentation technical

33%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	217.160.0.135	Germany	AS8560IONOS SE
6	185.92.183.208	Riga, Riga, Latvia	AS56971Cgi Global Limited
6	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
6	142.251.127.84Google · CDN	United States	AS15169Google LLC
6	13.33.52.208Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
30	5	-	-