Security Scan Report: iberian-trade.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 2 countries across 10 domains to perform 33 HTTP transactions. The main domain is iberian-trade.com and was registered 2 months ago.

Submitted URL: https://iberian-trade.com/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate-looking WordPress site compromised and serving a ClickFix 'Human Verification' overlay with an EtherHiding blockchain loader; critical YARA and kit-roster hits confirm malware distribution. Do not interact.

Risk Factors (6)
Injected ClickFix social-engineering overlay instructing Windows users to open Terminal and paste attacker-supplied commands
Fake Cloudflare 'connection security review' screen with fabricated Ray ID — brand impersonation of Cloudflare
EtherHiding: blockchain smart-contract-based loader used to retrieve the malicious overlay host, evading takedowns
7 CRITICAL network IDS alerts for EtherHiding exfiltration / malware traffic
Primary domain and scanned URL flagged in multiple threat-intel feeds for iClickFix malware
Obfuscated loader script concealing threat-feed RPC hosts; unranked script host cloud-browse.codes delivering code
Domain age information unavailable

Details

Page Title

Iberian Trade – Formación, Gestión de Negocios y Tecnología

Scan Type

public

Domain Name Analysis

The domain name 'iberian-trade.com' uses the commercial generic top-level domain (.com) and has no subdomain. The core label 'iberian-trade' covers 13 characters with 6 vowels and 6 consonants; bonus characters include 1 hyphen. Tokenizing the label suggests 2 words: iberian, trade. The median word length lands at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://iberian-trade.com/

Page Load Overview

0.77s
Total Load Time
453 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:4,045 chars
Detector Agreement:75%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

Search
Articles
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5217.160.0.134Germany
AS8560IONOS SE
2104.18.18.62Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.23.56Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
2172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.22.56Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3315--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12A54CCE7A3C813FEF9ACCDDA6098512B60F5F08C78720668E6E5D74BB56AD507920D30

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:QojZn2ojZn2ojZn2ojZn2ojZn2ojZn2ojZn2ojZn2ojZnjYkVNnDSojZnJojZngA:QppppppppCFVNDSOl/pX1c

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:298840:oSYQEMhihyEByYAgFAAjAUoQALboJIAEBQL4D02rpHgY6QIMkSRIKLAgyBgKA1J9CAww0IAsASJNICCCxT5TgpABQCkCZqqV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc7c3c3ffffffff
Perceptual Hash:b03193c7c6ccccce
Difference Hash:0818163600000008
Wavelet Hash:fcc4c0c00c0cff00
Color Hash:#97bf40

Other Hashes

Crop Resistant:0818163600000008

Scan History

Scan history not available

Unable to load historical scan data