Security Report: fcaes.com.mx - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ac8e6725-0a02-46b9-b7d1-6fd94ddcc65b Domain and IP registration (RDAP)/api/v1/rdap/ac8e6725-0a02-46b9-b7d1-6fd94ddcc65bHow often this domain was scanned/api/v1/domain/stats/fcaes.com.mx Scan history for this domain/api/v1/domain/history/fcaes.com.mx?limit=15

This website contacted 15 IPs in 3 countries across 13 domains to perform 75 HTTP transactions. The main domain is fcaes.com.mx and was registered 2 years 6 months ago.

Submitted URL: https://fcaes.com.mx

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate FCAES architects' federation site has been compromised: injected ClickFix/EtherHiding script shows a fake Cloudflare 'Human Verification' overlay that tricks Windows users into pasting a malicious command in Terminal.

Risk Factors (5)

Compromised WordPress site injecting ClickFix / EtherHiding malware loader

Fake Cloudflare 'Human Verification' overlay social-engineering users into running a terminal command

Obfuscated JavaScript resolving next-stage payload via Polygon smart contract RPC

Critical IDS malware alert (EtherHiding exfiltration) and multiple blockchain RPC connections

Threat-intel matches on the primary domain and on sub-resources loaded by the page

Domain age information unavailable

Details

Page Title

Home - Federación de colegios de Arquitectos del Estado de Sonora A.C.

Scan Type

public

Favicon Hash

MMH3: -1818276582

MD5: cc1badefc3899a636c521216729135a2

Domain Name Analysis

The domain 'fcaes.com.mx' uses the Mexican country-code top-level domain (.com.mx) while skipping any subdomain. Count 5 characters in 'fcaes' holding 2 vowels versus three consonants. Splitting it apart reveals two words: fc, aes. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

18.86s

Total Load Time

3.3 MB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:9,409 chars

Detector Agreement:75%

Website Classification

Primary Category

government public service53% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

government public service

53%

real estate property

52%

education learning

39%

corporate

35%

forum community discussion

29%

Detected Features

Comments

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	162.241.2.161	Vinhedo, São Paulo, Brazil	AS31898Oracle Corporation
5	142.251.20.95Google · CDN	United States	AS15169Google LLC
5	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
5	172.66.174.217Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
5	142.251.20.94Google · CDN	United States	AS15169Google LLC
5	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
5	104.20.33.75Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	172.67.71.102Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	192.0.77.48	San Francisco, California, United States	AS2635Automattic, Inc
75	15	-	-