Security Scan Report: esselfire.com

Redirected to:
https://www.esselfire.com/templets/default/css/popup.php
Site favicon
Submitted: Completed: publiccompleted
This website contacted 25 IPs in 2 countries across 11 domains to perform 84 HTTP transactions. The main domain is esselfire.com and was registered 21 years ago.

Submitted URL: https://esselfire.com/templets/default/css/popup.php

Effective URL:
https://www.esselfire.com/templets/default/css/popup.php
Redirected

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

The URL is flagged as malware by a single unverified source, and a PHP file is served from a template CSS directory. The site is otherwise a genuine 21-year-old valve maker, which suggests it may be compromised. Avoid this path.

Risk Factors (3)
Three malware-typed threat-intel matches point at this domain and at this exact URL
The PHP script is served from the template CSS folder, where legitimate stylesheets do not execute
Dynamic code execution: 5 eval() calls detected
Domain age information unavailable

Details

Page Title

Page not found - ESSEL Valves Private Limitedother network

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'esselfire.com' is registered without a subdomain. The registrable portion 'esselfire' spans 9 characters with 4 vowels and five consonants. Tokenizing the label suggests 3 words: e, ssel, fire. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

TESSEL ae = A SAFER WORLD 404 Home / Page not found Opps! That's page not found. OUR PRODUCTS USEFUL LINKS NEWSLETTER > Landing Valve > Home

Page Load Overview

19.48s
Total Load Time
4.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,050 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical97% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
97%
corporate
35%
education learning
31%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
42103.53.42.223Mumbai, Maharashtra, India
8142.251.154.4Google · CDNUnited States
AS15169Google LLC
6192.178.183.94Google · CDNUnited States
AS15169Google LLC
5142.251.155.120Google · CDNUnited States
AS15169Google LLC
4142.251.152.119Google · CDNUnited States
AS15169Google LLC
3142.251.155.119Google · CDNUnited States
AS15169Google LLC
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
3142.251.157.120Google · CDNUnited States
AS15169Google LLC
3142.251.151.4Google · CDNUnited States
AS15169Google LLC
3142.251.151.119Google · CDNUnited States
AS15169Google LLC
8425--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19C33F973E8E444272BA683D8A166F31CE995D317CA0B96A4F1FC21688BD4DF305E721D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:ExYyp/yAqvahjx/KkBfGSn94ZN14KWtUhREH:Ex5VyAqvahjx/KkBfGS94ZD4KWtUha

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:52161:iFIiqHmgVRCsQaEwACUkgBUFGBJaDDpEiCAApIDmQzECbQFwFTxiEEWQQ6Qitg0wsAYEMmDIURCnRNHzZB8wWIFgYQDKSAFL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000000ffffff60
Perceptual Hash:e31c43bc433c679c
Difference Hash:9cb83232b20cacc9
Wavelet Hash:46000a00ffffff61
Color Hash:16001038000

Scan History

Scan history not available

Unable to load historical scan data