Security Report: edwardlopezfotografia.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e1b3d2ab-1e3c-4b1c-bb15-f0d21df78ea8 Domain and IP registration (RDAP)/api/v1/rdap/e1b3d2ab-1e3c-4b1c-bb15-f0d21df78ea8How often this domain was scanned/api/v1/domain/stats/edwardlopezfotografia.com Scan history for this domain/api/v1/domain/history/edwardlopezfotografia.com?limit=15

This website contacted 11 IPs in 3 countries across 9 domains to perform 90 HTTP transactions. The main domain is edwardlopezfotografia.com and was registered 4 years 3 months ago.

Submitted URL: https://edwardlopezfotografia.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Compromised photography site serving a ClickFix/ETHERHIDING kit: fake Cloudflare 'Human Verification' overlay pushes Windows users to paste a Terminal command that loads a blockchain-resolved payload.

Risk Factors (5)

Injected ClickFix 'Human Verification' overlay tricking Windows users into executing a Terminal paste-and-run command

EtherHiding: malicious loader retrieves its payload address from a Polygon smart contract (IDS CRITICAL x4)

Obfuscated first-stage script loaded from cloud-browse.codes, flagged as an exploit kit by three feeds

Legitimate WordPress photography site (1566-day-old domain, self-branded) evidently compromised and abused to host the kit

Fake Cloudflare challenge branding used to lend the overlay credibility

Domain age information unavailable

Details

Page Title

Edward López – Fotografía Profesional

Scan Type

public

Favicon Hash

MMH3: -674096511

MD5: 660055803d5dd3a78765278f1b79691f

Domain Name Analysis

The domain name 'edwardlopezfotografia.com' uses the commercial generic top-level domain (.com) with no subdomain. Count 21 characters in 'edwardlopezfotografia' containing nine vowels alongside twelve consonants. It segments into five words: edward, lopez, fotogr, a, fia. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.14s

Total Load Time

9.7 MB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:1,598 chars

Detector Agreement:50%

Website Classification

Primary Category

news/blog40% confidence

Type: spa

Method: structural

All Detected Categories

news/blog

40%

Detected Features

Articles

Comments

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	162.241.2.166	Vinhedo, São Paulo, Brazil	AS31898Oracle Corporation
8	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
8	74.125.29.95Google · CDN	United States	AS15169Google LLC
8	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
8	192.0.76.3	San Francisco, California, United States	AS2635Automattic, Inc
8	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
8	104.26.8.123Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	142.251.20.95Google · CDN	United States	AS15169Google LLC
8	104.26.9.123Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
90	11	-	-