Security Scan Report: usatoday.es

Site favicon
Submitted: Completed: publiccompleted

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Spanish-language news aggregator on usatoday.es displaying the 'USA Today' brand on a non-official, unranked domain, with injected ad/spam text. No credential or payment harvesting and no malware, but the brand claim is unverified.

Risk Factors (4)
Major news brand ('USA Today') presented in title/OG tags on a domain that is not the brand's official domain
Scanned domain is unranked / absent from Cisco Umbrella top 1M despite the brand claim
Page mixes scraped news content with unrelated injected advertising text (German dating-site strings, 'USA TYODA')
Cross-origin ad-tracking scripts and repeated .cc TLD DNS queries flagged by network IDS
Safety Factors (5)
Domain is well established (registered 2023-11-17, ~1053 days old)
No threat-intelligence Indicators of Compromise matches against the page or its resources
No YARA malware or high-precision native-YARA hits
No credential exfiltration and no payment fields; the password field is the standard WordPress admin login
Established WordPress-style newsletter subscription to wordpress.com, not credential exfiltration
Domain age information unavailable

Details

Page Title

Página Principal - USA Today

Scan Type

public

Domain Name Analysis

Domain 'usatoday.es' uses the Spanish country-code top-level domain (.es) while skipping any subdomain. The registrable portion 'usatoday' spans 8 characters containing four vowels alongside four consonants. Tokenizing the label suggests 2 words: usa, today. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://usatoday.es/

Page Load Overview

0.45s
Total Load Time
3.5 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es-ES
Text Length:9,841 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning99% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
99%
real estate property
99%
government public service
76%
healthcare medical
70%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1492.113.23.50Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
13192.178.183.95Google · CDNUnited States
AS15169Google LLC
13142.251.14.94Google · CDNUnited States
AS15169Google LLC
1392.113.16.44Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
13192.178.183.97Google · CDNUnited States
AS15169Google LLC
13142.251.20.154Google · CDNUnited States
AS15169Google LLC
13142.251.20.156Google · CDNUnited States
AS15169Google LLC
13192.0.77.2San Francisco, California, United States
AS2635Automattic, Inc
13142.251.127.84Google · CDNUnited States
AS15169Google LLC
13142.251.20.157Google · CDNUnited States
AS15169Google LLC
23518--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11375091BF5E21A7382A68AF0527B377C7B38CD5D8FC18CB46942676E078ADD7028518D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:Zz2ZzCgMEIYZvtrOWZjtXOGZjt7Ov1xCgMEIYZvtrOGZFthOoZjtrOv1jeVBCgMH:pR+DD44Mjpev2/OTMsOMdgM3N

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1565963:mp8IUwLIFgAQNAEIAxwCglE83AlnQUACgqDUWbIogIIKH2kjAMg0SlGAJmI5kSYGPShQAHQg0iQfEOamCC8AAGgCgBQQhJQk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffefe7ffffff4c
Perceptual Hash:f2a55a857aa55a85
Difference Hash:0200480504116699
Wavelet Hash:0c0c07070f0f0f00
Color Hash:#405bbf

Other Hashes

Crop Resistant:0200480504116699

Scan History

Scan history not available

Unable to load historical scan data