Security Scan: Barcelona Drum Fest

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e1da616f-55ba-4403-9111-03eae53f6dd0 Domain and IP registration (RDAP)/api/v1/rdap/e1da616f-55ba-4403-9111-03eae53f6dd0 Certificate Transparency/api/v1/ct/barcelonadrumfest.art How often this domain was scanned/api/v1/domain/stats/barcelonadrumfest.art Scan history for this domain/api/v1/domain/history/barcelonadrumfest.art?limit=15

This website contacted 9 IPs in 4 countries across 10 domains to perform 85 HTTP transactions. The main domain is barcelonadrumfest.art and was registered 6 days ago.

Submitted URL: https://barcelonadrumfest.art

Effective URL:

https://www.barcelonadrumfest.art/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate-looking drum-festival site compromised with a ClickFix Win+X/Terminal overlay and EtherHiding loader; IDS, YARA and multi-feed threat intel confirm malicious injected code. Do not interact.

Risk Factors (7)

Injected ClickFix Win+X → Terminal fake 'Human Verification' overlay (analyst-vetted malicious kit, CRITICAL)

HIGH-precision YARA hit ClickFix_WinX_Overlay_Kit on the HTML body

8 CRITICAL IDS alerts for EtherHiding malware exfiltration

Page scripts contact blockchain RPC endpoints used for EtherHiding/loader C2

Malicious third-party script hosts (ghostharvest.com magentocore, checkyoubrowse.codes, rehearsal-b.com)

Primary domain flagged as malware loader by threat intelligence

Fake Cloudflare security-check wording and Ray ID to lend credibility to the scam overlay

Domain age information unavailable

Details

Page Title

Barcelona Drum Fest

Scan Type

public

Favicon Hash

MMH3: 530492348

MD5: dcab89b8e04bf53fcd7f6a44a8cb4fae

Domain Name Analysis

Domain 'barcelonadrumfest.art' uses the .art top-level domain with no subdomain. The core label 'barcelonadrumfest' covers 17 characters split between six vowels and eleven consonants. Splitting it apart reveals 3 words: barcelona, drum, fest. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.87s

Total Load Time

5.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:36%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:2,415 chars

Detector Agreement:67%

Language mismatch: Declared as es but detected as en

Website Classification

Primary Category

entertainment media63% confidence

Type: spa

Method: ml+structural

All Detected Categories

entertainment media

63%

news media journalism

56%

cryptocurrency blockchain

38%

Detected Features

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	185.34.192.170	Spain	AS19771210dencehispahard, S.L.
9	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	146.19.24.104	Poland	AS201814MEVSPACE sp. z o.o.
9	172.67.171.128Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
9	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
85	9	-	-