Security Scan Report: eventos2punto0.es

Redirected to:
https://www.eventos2punto0.es/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 4 domains to perform 169 HTTP transactions. The main domain is eventos2punto0.es.

Submitted URL: https://eventos2punto0.es

Effective URL:
https://www.eventos2punto0.es/
Redirected

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Legitimate 18-year-old event-planning site that has been compromised: an injected ClickFix 'Human Verification' loader and a WordPress admin-creation backdoor are present, plus a malware 'unknown loader' threat-intel report. Do not interact.

Risk Factors (4)
Analyst-vetted ClickFix 'Human Verification' malware kit injected into the page (CRITICAL phishing YARA rule, roster-anchored)
Injected WordPress user-creation backdoor (wp_insert_user with hardcoded admin credentials) visible on the page
Obfuscated JavaScript with 8 eval() calls and corresponding IDS obfuscator alerts
Threat intelligence lists the domain as a malware 'unknown loader'
Domain age information unavailable

Details

Page Title

Inicio - Eventos 2.0

Scan Type

public

Domain Name Analysis

Domain 'eventos2punto0.es' uses the Spanish country-code top-level domain (.es) while skipping any subdomain. The second-level label 'eventos2punto0' is 14 characters long holding five vowels versus 7 consonants; bonus characters include 2 digits. Word splitting yields 6 words: even, to, s, 2, punto, 0. Expect 1.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://eventos2punto0.es

Page Load Overview

22.62s
Total Load Time
11.2 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:9,560 chars
Detector Agreement:50%

Website Classification

Primary Category

documentation technical50% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
50%
government public service
41%
blog personal website
39%
cryptocurrency blockchain
39%
technology software
38%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
43142.251.13.95Google · CDNUnited States
AS15169Google LLC
4277.81.119.67Seville, Andalusia, Spain
AS39020Comvive Servidores S.L.
42142.250.154.95Google · CDNUnited States
AS15169Google LLC
42142.251.13.94Google · CDNUnited States
AS15169Google LLC
1694--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13282F0DB63D807ADA99C4CDE924562277072D0AE38352755F9EED74B2F7AC60B830930

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:rqVFQf06NwEFpUHh5kshBChW9iV9lBX6ql1joEFk:ro8wsSch6gFk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:19104:BhsDyMCaGCEULCpFgAgshAJgADABJg2lDkIfBWATrAoIJg4CiAIAejWZiBRoIoAAKGCDlVIg+Qz2BpKBNTDGKFhUiAIQWwFF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffffffffff
Perceptual Hash:aa2a2a2a6ec5d5d5
Difference Hash:2539002100000000
Wavelet Hash:00000f0f00000000
Color Hash:#937e1f

Other Hashes

Crop Resistant:2539002100000000

Scan History

Scan history not available

Unable to load historical scan data