ScanMalware.com

Security Scan Report: copilan.com

Site favicon
Submitted: Oct 9, 2026, 6:59:23 PMCompleted: Oct 9, 2026, 7:00:20 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Legitimate-looking 12-year-old accounting site, but its primary domain matches a multi-source 'clearfake' malware indicator and its scripts contact BSC testnet RPC nodes — a ClearFake/EtherHiding injection pattern. Avoid interacting.

Risk Factors (3)
Multi-source content-malware threat-intel match on the primary domain ('clearfake' malware, 2 independent feeds)
Blockchain RPC network sinks (BSC testnet) contacted by page scripts — characteristic of ClearFake/EtherHiding second-stage payload delivery
Compromised-site pattern: legitimate accounting business content combined with injected blockchain-fetching JavaScript
Domain age information unavailable

Details

Page Title

Copilan S.R.L - Copiado de Libros Contables

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'copilan.com' is registered with no subdomain. The core label 'copilan' covers 7 characters split between three vowels and four consonants. Breaking it apart gives two words: cop, ilan. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://copilan.com

Page Load Overview

4.74s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es-AR
Text Length:4,663 chars
Detector Agreement:80%

Website Classification

Primary Category

government public service94% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
94%
corporate business
92%
finance banking
86%
adult content
82%
technology software
77%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2045.162.168.140Argentina
AS267681Argentina Virtual Networks SRL
4192.178.183.95Google · CDNUnited States
AS15169Google LLC
4192.178.183.97Google · CDNUnited States
AS15169Google LLC
454.192.35.96Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
415.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
415.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
452.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
9620--

Detected Technologies10

WordPressv7.1.3
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
Google-AnalyticsvUniversal
100%
PHP
50%
MySQL
50%
Google Analytics
35%
Twenty Thirteen
20%
Joinchat
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1000407617A4A1C7A215F07CFA01B260C61DBDEF9E912A5E1F5F3912452F2CE237E3069

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:RQuRAA+iJ41By9jDkNdCAF2FdnI8fIoAXst6sCXst6x9Xst6DDRyrL54uxc3wTsb:SaG4MNd3iI8fIbr3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:188285:BCgKg4DAaLADNywgBAVDkFZCVeAQw1LEgJdKCWHEBNGkKX4EUJEiEqAkCAgIZuWAAiAoWkRSiAgSDAYBgdEABSwQQAAMhgKk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff003000000000ff
Perceptual Hash:c2cdbcb8f784dc08
Difference Hash:22c171454d81cd8f
Wavelet Hash:ff217d20200077ff
Color Hash:#d66ce0

Other Hashes

Crop Resistant:22c171454d81cd8f,49c1714c4d11cdcc

Scan History

Scan history not available

Unable to load historical scan data