Security Report: diariodeestoicos.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b31ca097-77c5-4a77-be23-55000bcb58d7 Domain and IP registration (RDAP)/api/v1/rdap/b31ca097-77c5-4a77-be23-55000bcb58d7How often this domain was scanned/api/v1/domain/stats/diariodeestoicos.com Scan history for this domain/api/v1/domain/history/diariodeestoicos.com?limit=15

This website contacted 33 IPs in 2 countries across 21 domains to perform 142 HTTP transactions. The main domain is diariodeestoicos.com and was registered 2 years 4 months ago.

Submitted URL: https://diariodeestoicos.com

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised site injecting a ClickFix fake 'Human Verification' overlay that pushes Windows users to paste commands into Terminal; EtherHiding loader pulls stage two from a blockchain contract. Confirmed malware distribution.

Risk Factors (6)

Injected ClickFix fake 'Human Verification' overlay kit (analyst-vetted, CRITICAL) on the page — visible 'Human Verification' text in page content

EtherHiding: stage-two payload address retrieved from a Polygon smart contract via obfuscated packed JavaScript

Third-party blockchain RPC endpoints (polygon.gateway.tenderly.co, polygon-public.nodies.app, rpc-mainnet.matic.quiknode.pro) contacted via XMLHttpRequest and flagged as ClickFix / exploit-kit infrastructure

Critical network IDS alerts for malware C2/exfiltration (EtherHiding Exfil, ClickFix domain, ErrTraffic exploit-kit check-in)

Primary domain itself carries a malware 'unknown loader' threat-intel report; unranked script host browse-codes-enter.beer serves JavaScript

Content that is a legitimate-looking stoicism course page while also emitting a Windows ClickFix terminal lure — classic sign of a compromised site

Domain age information unavailable

Details

Page Title

Diario de Estoicos | Serenidad y Disciplina en tu Día a Día

Scan Type

public

Favicon Hash

MMH3: 695832373

MD5: b95c88167eb20018562f8a36198136a7

Domain Name Analysis

The domain name 'diariodeestoicos.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Count 16 characters in 'diariodeestoicos' holding nine vowels versus seven consonants. Splitting it apart reveals 4 words: diario, dee, stoic, os. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.65s

Total Load Time

3.2 MB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:7,276 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence

Type: spa

Method: structural

All Detected Categories

corporate

70%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	217.160.0.43	Germany	AS8560IONOS SE
4	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
4	192.178.183.95Google · CDN	United States	AS15169Google LLC
4	142.251.20.97Google · CDN	United States	AS15169Google LLC
4	141.101.90.105Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.13.94Google · CDN	United States	AS15169Google LLC
4	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	18.66.112.106Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
4	142.251.151.4Google · CDN	United States	AS15169Google LLC
4	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
142	33	-	-