Security Scan Report: www.seinfor.pe

Submitted: Completed: publiccompleted
This website contacted 16 IPs in 2 countries across 15 domains to perform 57 HTTP transactions. The main domain is seinfor.pe.

Submitted URL: https://www.seinfor.pe

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Compromised WordPress site serving ClickFix/EtherHiding malware: fake bot-verification instructs victims to run PowerShell commands, with critical IDS malware alerts, blockchain exfil and injected casino spam.

Risk Factors (5)
Critical malware IDS alerts (EtherHiding exfiltration, exploit kit TDS, ClickFix domain DNS query)
ClickFix fake verification instructions directing victims to run PowerShell commands
Blockchain node connections consistent with EtherHiding malware delivery
Threat-intelligence malware classification of the domain and URL
Compromised WordPress installation hosting injected SEO/redirect content
Domain age information unavailable

Details

Page Title

WordPress › Error

Scan Type

public

Domain Name Analysis

Within the Peruvian country-code top-level domain (.pe), 'www.seinfor.pe' is registered, featuring subdomain 'www'. The core label 'seinfor' covers 7 characters containing three vowels alongside four consonants. It segments into two words: sein, for. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.seinfor.pe

Page Load Overview

12.41s
Total Load Time
801 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:1,315 chars
Detector Agreement:100%
Language mismatch: Declared as es but detected as en

Website Classification

Primary Category

technology software78% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
78%
documentation technical
57%
phishing scam
39%
corporate business
34%
government public service
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12131.72.236.194Santiago, Santiago Metropolitan, Chile
AS263753SERVICIOS DE DATACENTER DATANETWORKS LIMITADA
3104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
33.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
33.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
352.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
5716--

Detected Technologies4

WordPressv6.8.11
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T104149D5BDB80CF59D54D9DE6C212796743F4CEBBB12170EEBBA18FC6740C8926838921

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:oCDJoLrJogF50OZWBSxO/TpZdapzCsjmSRt5f2GB:oCDOLrOWrXQ/tapjlRtJ2s

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:190756:4RANoYMYvZjBhVSTQAJhA6EAQjkAMEhlBANkLKiCJWUKT9qJBIOgKDQPYYQD4AQE+IpBmxEqhGog3kJ3EnA5AYKJJhEM8wRK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c3c2c3c00000000
Perceptual Hash:9b9b8c6c6ccc3323
Difference Hash:7179597004000000
Wavelet Hash:fcfcfcfc00000000
Color Hash:#7f79d2

Other Hashes

Crop Resistant:7179597004000000

Scan History

Scan history not available

Unable to load historical scan data