ScanMalware.com

Security Scan Report: csifrenteatlantica.chp.pt

Site favicon
Submitted: Oct 9, 2026, 6:43:03 PMCompleted: Oct 9, 2026, 6:43:42 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Legitimate Portuguese equestrian site compromised: two analyst-vetted ClearFake kit components (Polygon EtherHiding loader + rival-kit cleanup) and multi-feed Indicators of Compromise on the primary domain. Do not visit; treat as malware-hosting.

Risk Factors (4)
Analyst-vetted ClearFake Polygon contract loader (EtherHiding / ClickFix chain) injected into the page
ClearFake rival-kit cleanup script present, blocking navigation behind its own overlay
Indicators of Compromise: primary domain reported as clearfake malware by two independent threat-intel feeds
Page fetches a third-party resource host (rehearsal-b.com) that is itself flagged as malicious by two feeds
Domain age information unavailable

Details

Page Title

Home - CSI 2* Frente Atlântica

Scan Type

public

Domain Name Analysis

You're looking at domain 'csifrenteatlantica.chp.pt' on the Portuguese country-code top-level domain (.pt), featuring subdomain 'csifrenteatlantica'. The core label 'chp' covers 3 characters with zero vowels and three consonants. Word splitting yields 1 word: chp. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://csifrenteatlantica.chp.pt

Page Load Overview

5.08s
Total Load Time
3.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:39%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-PT
Text Length:2,545 chars
Detector Agreement:60%
Language mismatch: Declared as pt-PT but detected as en

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%
news/blog
60%

Detected Features

Articles
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
32176.61.151.84Portugal
AS33876Dominios, S.A.
3192.178.183.95Google · CDNUnited States
AS15169Google LLC
3188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
3142.251.155.4Google · CDNUnited States
AS15169Google LLC
3172.67.171.128Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.170.23Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.152.4Google · CDNUnited States
AS15169Google LLC
3104.21.95.226Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.142.119Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14037--

Detected Technologies8

WordPressv6.1.15
100%
Open-Graph-Protocolvarticle
100%
MetaGenerator
100%
JQueryv3.6.1
100%
YouTube
50%
PHP
50%
MySQL
50%
Font Awesome
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T164D3C77139975D2D616F07CF6453360C90AAABD4F942A8EAF1F2612842F4DE833E3365

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:V/y0WOlAA7xqoapzLgZ1r9Iw7317MPX/M6QqNUjgiHNuHgXbWI9:E0NlAA9YtLJw7317MPXkRBNuHgXB9

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:130714:AIAlEkWpnB4BIFMqEyAYADOCIhW1OCSIMcFYzikgZHMCAFMLJP4A1KYoURwgghDiCC1kwEabCI8ESyyIWD0JChGmED5ANAF2

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefefffffff7e7e7
Perceptual Hash:f5dd5555d9268822
Difference Hash:0000000000080c0c
Wavelet Hash:020200003e362626
Color Hash:#862d67

Other Hashes

Crop Resistant:0000000000080c0c

Scan History

Scan history not available

Unable to load historical scan data