Security Report: deolano.es - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c977d966-6bd0-4ce2-96e8-9b8ea93aeaa4 Domain and IP registration (RDAP)/api/v1/rdap/c977d966-6bd0-4ce2-96e8-9b8ea93aeaa4How often this domain was scanned/api/v1/domain/stats/deolano.es Scan history for this domain/api/v1/domain/history/deolano.es?limit=15

This website contacted 9 IPs in 2 countries across 7 domains to perform 96 HTTP transactions. The main domain is deolano.es.

Submitted URL: https://deolano.es

AI Security Verdict

High Risk

Confidence: 93%

Risk Score

Compromised construction-company site serving the ClearFake blockchain loader (EtherHiding via Polygon RPC) plus injected gambling spam. No credential form, but malware delivery risk is high — avoid.

Risk Factors (6)

ClearFake malware kit injected into the page (YARA + kit roster, analyst-vetted)

EtherHiding: next-stage payload URL read from a Polygon smart contract

Obfuscated JavaScript concealing RPC/loader hosts (1rpc.io, polygon.drpc.org, polygon.publicnode.com)

Threat-intel malware match on the primary domain deolano.es (single-source)

Site content hijacked: construction-company branding replaced/augmented with injected gambling SEO spam posts authored by 'backupadmin', typical of a compromised WordPress install

Three INFO Suricata JavaScript-obfuscator hunting alerts (informational, but consistent with the obfuscated loader)

Domain age information unavailable

Details

Page Title

Construcciones Olano - Empresa de construcción con más de 40 años de experiencia

Scan Type

public

Favicon Hash

MMH3: 1274931200

MD5: 5843497b06b71ef927083223e6e12aab

Domain Name Analysis

The domain 'deolano.es' uses the Spanish country-code top-level domain (.es) while skipping any subdomain. The registrable portion 'deolano' spans 7 characters with 4 vowels and 3 consonants. Breaking it apart gives 3 words: de, ola, no. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.83s

Total Load Time

1.5 MB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:3,084 chars

Detector Agreement:80%

Website Classification

Primary Category

gambling betting77% confidence

Type: spa

Method: ml+structural

All Detected Categories

gambling betting

77%

corporate

35%

news/blog

20%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
16	79.139.120.37	Spain	AS16371acens Technologies, S.L.
10	142.251.14.95Google · CDN	United States	AS15169Google LLC
10	142.251.152.119Google · CDN	United States	AS15169Google LLC
10	142.250.154.94Google · CDN	United States	AS15169Google LLC
10	142.251.13.94Google · CDN	United States	AS15169Google LLC
10	142.251.153.119Google · CDN	United States	AS15169Google LLC
10	142.251.151.119Google · CDN	United States	AS15169Google LLC
10	142.251.14.141Google · CDN	United States	AS15169Google LLC
10	142.251.155.119Google · CDN	United States	AS15169Google LLC
96	9	-	-