Security Report: glosamarina.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d86f74a7-bb70-45d0-b287-430766e0d4a0 Domain and IP registration (RDAP)/api/v1/rdap/d86f74a7-bb70-45d0-b287-430766e0d4a0How often this domain was scanned/api/v1/domain/stats/glosamarina.com Scan history for this domain/api/v1/domain/history/glosamarina.com?limit=15

This website contacted 11 IPs in 3 countries across 9 domains to perform 82 HTTP transactions. The main domain is glosamarina.com and was registered 14 years ago.

Submitted URL: https://glosamarina.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate Mallorca salt vendor site compromised with a ClickFix 'Human Verification' overlay kit; YARA, kit roster and CRITICAL IDS confirm malware that lures Windows users into pasting attacker code.

Risk Factors (5)

Known malicious ClickFix 'Human Verification' phishing kit injected into the page (analyst-vetted roster match)

Critical YARA malware rules match the HTML body (ClickFix Win+X overlay and packed blockchain loader)

Fake Cloudflare-style verification overlay instructing Windows users to open Terminal (Win+X) and paste attacker code

EtherHiding: obfuscated script resolves its next stage from a Polygon smart contract, with threat-feed RPC hosts hidden in the encoded script

Multiple CRITICAL IDS alerts for ClickFix domain traffic and malware exfiltration on an otherwise legitimate salt vendor's site (compromise)

Domain age information unavailable

Details

Page Title

Sal Marina, Mallorca - Glosa Marina

Scan Type

public

Domain Name Analysis

Domain 'glosamarina.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The core label 'glosamarina' covers 11 characters containing five vowels alongside 6 consonants. Breaking it apart gives two words: glosa, marina. The median word length lands at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.71s

Total Load Time

2.3 MB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es-ES

Text Length:6,247 chars

Detector Agreement:80%

Website Classification

Primary Category

corporate business99% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

99%

government public service

91%

blog personal website

91%

adult content

88%

education learning

77%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	213.158.86.200	Italy	AS34762Combell NV
7	142.251.110.95Google · CDN	United States	AS15169Google LLC
7	142.251.20.97Google · CDN	United States	AS15169Google LLC
7	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
7	142.251.20.94Google · CDN	United States	AS15169Google LLC
7	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
7	216.239.32.36Google · CDN	United States	AS15169Google LLC
7	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
7	142.251.14.94Google · CDN	United States	AS15169Google LLC
82	11	-	-