Security Scan Report: auditormadrid.es

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 3 countries across 4 domains to perform 19 HTTP transactions. The main domain is auditormadrid.es.

Submitted URL: https://auditormadrid.es/wp-content/mu-plugins/iklqzct/iuo/alibaba/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Confirmed Alibaba credential phishing kit hosted on a compromised WordPress site; Safe Browsing flags social engineering and the page collects email/password under Alibaba branding.

Risk Factors (5)
Brand impersonation of Alibaba.com on an unrelated domain
Login form collecting email and password
Google Safe Browsing Social Engineering detection
Phishing page hosted inside WordPress mu-plugins directory (compromised site)
Unranked domain claiming to be a major global brand
Domain age information unavailable

Details

Page Title

Alibaba Manufacturer Directory - Suppliers, Manufacturers, Exporters & Importers

Scan Type

public

Domain Name Analysis

The domain 'auditormadrid.es' uses the Spanish country-code top-level domain (.es) while skipping any subdomain. The second-level label 'auditormadrid' is 13 characters long containing six vowels alongside 7 consonants. Tokenizing the label suggests 2 words: auditor, madrid. Median word length is 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

€2,Alibaba.com Get support Help Center Live chat Check order status Refunds Report abuse Trade Assurance Safe and easy payments Money-back policy On-time shipping After-sales protections Product...

Page Load Overview

1.62s
Total Load Time
394 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,298 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business66% confidence
Type: static
Method: ml+structural

All Detected Categories

corporate business
66%
technology software
53%
documentation technical
47%
e-commerce shopping
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4217.149.13.187Spain
AS31653Servatica Technologies, S.L.
318.66.115.191Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3163.181.58.167Frankfurt am Main, Hesse, Germany
AS24429Zhejiang Taobao Network Co.,Ltd
3151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
3163.181.58.166Frankfurt am Main, Hesse, Germany
AS24429Zhejiang Taobao Network Co.,Ltd
3151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
196--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F3D2B5A0A0F4936D0986539ABB28659F1F3E205FB1844D98709C0FD48FF2895DE53DAE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:1hsKBpQHTJ8IwmzWVOavZpEp/Zt2wD08QIvLbTciU4NNi8eU:1hsScTmIw0WVtvZi1ZxvYSD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30862:AJZBhREJtQE02QjABJIAthisSQ5CAGKAqY2iwpSEeiIi5spBgI4MGuIwoEgSEBAsFCpGBiwQEQSUwyoiEEJGabIBgkEEge4x

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff04040c0000ffff
Perceptual Hash:9212ed6989cdede0
Difference Hash:608cccfc3c430017
Wavelet Hash:ff04040e0409ffff
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data