Security Scan Report: baferequipos.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 6 domains to perform 52 HTTP transactions. The main domain is baferequipos.com and was registered 11 years ago.

Submitted URL: https://baferequipos.com

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Legitimate 11-year-old lab-equipment site that has been compromised: the page serves the ClearFake Polygon contract loader (EtherHiding) and is flagged as malware by two threat-intel feeds. Do not browse; it can deliver a ClickFix second stage.

Risk Factors (4)
CRITICAL-severity YARA hit for the ClearFake Polygon contract loader (known malicious phishing kit)
Multi-source malware threat-intelligence match on the domain (ClearFake)
Injected obfuscated JavaScript / EtherHiding loader hosted on a compromised legitimate site, delivering a second-stage payload to Windows visitors
Unranked domain with weak legitimacy signals (30/100) despite long registration age
Domain age information unavailable

Details

Page Title

Bafer Equipos - Bafer Equipos

Scan Type

public

Domain Name Analysis

The domain 'baferequipos.com' uses the commercial generic top-level domain (.com) without a subdomain. The second-level label 'baferequipos' is 12 characters long with 6 vowels and 6 consonants. Segmentation suggests 4 words: b, afer, equip, os. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://baferequipos.com

Page Load Overview

2.23s
Total Load Time
792 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es-es
Text Length:2,024 chars
Detector Agreement:33%

Website Classification

Primary Category

gambling betting69% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
69%
entertainment media
61%
documentation technical
33%
corporate business
27%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1066.225.201.117Chicago, Illinois, United States
AS23352DEFT.COM
6142.251.14.95Google · CDNUnited States
AS15169Google LLC
6193.108.153.161Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
6104.17.96.195Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6216.198.54.3Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
623.53.40.26Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
6104.17.95.195Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.17.98.195Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
528--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T144C2F7708AA48D23D2B21580FC31BB5DE4F1A503DF57CC19B2EF75A5ABC5AE88A1117C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:wVN4x6x+yzlrr4ixODjgOb43VvTU4WOZTMfBC7qV:+g6Ierr4mO3/yNWOO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:27739:KYhEGAPAagF9IAqqEBoFA1AWBBBoFKHmI8CgYAFCIDgiyBTSgIAxFkRFRVSBJSCAUEXQhAhFKmoYSThGgNUiOlEUECHwCgag

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff8783878fd3dbff
Perceptual Hash:bc3ac1c5923d4cd3
Difference Hash:933b3b3a2e9612c9
Wavelet Hash:df8783838fd3d300
Color Hash:#d2a679

Scan History

Scan history not available

Unable to load historical scan data