Security Scan Report: jleonengineering.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 2 countries across 9 domains to perform 30 HTTP transactions. The main domain is jleonengineering.com and was registered 3 years 7 months ago.

Submitted URL: https://jleonengineering.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Legitimate engineering-consulting site appears compromised: ClearFake EtherHiding and ErrTraffic/Exvicy malicious loaders are injected into the page, with critical IDS and corroborated threat-intel matches. Avoid visiting until cleaned.

Risk Factors (5)
Known malicious kit injected into the page (ClearFake EtherHiding loader, ErrTraffic/Exvicy WordPress injection)
EtherHiding: server list fetched from a Polygon smart contract via public RPC nodes
TA2726 traffic-distribution-system domain contacted from the page
Multiple flagged third-party domains loaded/contacted by page scripts
Site appears compromised (WordPress) and serving a ClickFix malware chain to visitors
Domain age information unavailable

Details

Page Title

Engineering Consulting Services- JLeonEngineering

Scan Type

public

Domain Name Analysis

The domain name 'jleonengineering.com' uses the commercial generic top-level domain (.com) with no subdomain. Its registrable label 'jleonengineering' stretches across 16 characters split between 7 vowels and 9 consonants. Word splitting yields three words: j, leon, engineering. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://jleonengineering.com

Page Load Overview

2.31s
Total Load Time
279 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,481 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical54% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
54%
corporate business
31%
education learning
26%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8160.153.0.109Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
223.207.210.148Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2172.67.181.66Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
223.67.142.207Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
2142.251.13.95Google · CDNUnited States
AS15169Google LLC
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
223.207.210.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
3012--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C804F720ABA068B6316B033CE59BF208E5691923D79D57D6F0BDC1541BCCBA625B370F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:F7nAlnuE+Su1KHfhqCuypAA30MxU6VAnGEEwi8/Ueonblz32Du0kxLNyBHRTeeCh:FjSiA3188eon5T0ELN/Nwoh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:186768:hJgUiGYDaCJKBMIRwDECoQwhio8JLEm1FECQhYCGEMEgVlIiAA7BMKBSOSO6q0gLRIIlv0VyIQk8AYAFAsBIkAwEZ5gjJAIJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff9f9f9f9f0f0f
Perceptual Hash:bec633cc271cec03
Difference Hash:2a98282828341a5a
Wavelet Hash:827e0f0f0f0f0f0f
Color Hash:#ac7a53

Scan History

Scan history not available

Unable to load historical scan data