Security Report: boxinstalaciones.com.ar - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b59b2a89-d7c7-4353-9ac8-83c87806202c Domain and IP registration (RDAP)/api/v1/rdap/b59b2a89-d7c7-4353-9ac8-83c87806202c Certificate Transparency/api/v1/ct/boxinstalaciones.com.ar How often this domain was scanned/api/v1/domain/stats/boxinstalaciones.com.ar Scan history for this domain/api/v1/domain/history/boxinstalaciones.com.ar?limit=15

This website contacted 7 IPs in 2 countries across 6 domains to perform 54 HTTP transactions. The main domain is boxinstalaciones.com.ar and was registered 3 months ago.

Submitted URL: https://boxinstalaciones.com.ar/

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Compromised 'coming soon' page for boxinstalaciones.com.ar that serves the DarkSword iOS exploit kit (Coruna wallet stealer), confirmed by roster-anchored YARA, three CRITICAL exploit-kit IDS alerts and a malware IoC on the primary domain.

Risk Factors (6)

Known malicious exploit kit (DarkSword iOS / Coruna wallet stealer) served from this page

CRITICAL YARA rule match for exploit delivery captcha gate

Multiple CRITICAL network IDS exploit-kit alerts

Malware IoC on the primary domain ('unknown loader')

On-page JavaScript performs cross-origin requests to unranked .icu and external loader/trigger hosts

Hidden/off-screen exploit iframes indicated by the identified kit signature

Domain age information unavailable

Details

Page Title

home - BOX

Scan Type

public

Favicon Hash

MMH3: -1015486469

MD5: a1e497703f5fdd44543acfb02b865985

Domain Name Analysis

The domain 'boxinstalaciones.com.ar' uses the Argentine country-code top-level domain (.com.ar). The core label 'boxinstalaciones' covers 16 characters with 7 vowels and nine consonants. It segments into 4 words: box, instal, aci, ones. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.97s

Total Load Time

955 KB

Total Size

Language Analysis

Primary Language

🇨🇳Chinese

Code: zh

Confidence:29%

Script:Han

Direction:ltr

Detection Details

HTML Lang Attribute:es-AR

Text Length:50 chars

Detector Agreement:50%

Language mismatch: Declared as es-AR but detected as zh

Website Classification

Primary Category

real estate property81% confidence

Type: spa

Method: ml+structural

All Detected Categories

real estate property

81%

news media journalism

37%

corporate

35%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	138.201.26.147	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
7	104.21.32.211Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	172.67.187.123Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	104.16.185.241Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	104.16.184.241Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
54	7	-	-