Security Scan Report: estacioneslapopular.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 1 country across 4 domains to perform 87 HTTP transactions. The main domain is estacioneslapopular.com and was registered 15 years ago.

Submitted URL: https://estacioneslapopular.com

AI Security Verdict

High Risk

Confidence: 75%

7
Risk Score

Legitimate 15-year-old Mexicali fuel-station site apparently compromised: page carries injected multilingual casino spam links plus a single-source malware threat-intel report on the domain. No forms or credential harvesting.

Risk Factors (3)
Hidden/injected casino and betting spam text in multiple languages within the page body, indicating injected SEO spam links
Single-source threat-intelligence report naming the primary domain as malware-related ('iclickfix')
Evidence of site compromise: unrelated third-party spam anchors embedded in what is otherwise a business brochure page
Domain age information unavailable

Details

Page Title

Estaciones La Popular – Gasolina Premium en el Valle de Mexicali

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'estacioneslapopular.com' is registered. Count 19 characters in 'estacioneslapopular' with 9 vowels and 10 consonants. Breaking it apart gives 4 words: estaci, ones, la, popular. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

SERVICIO A FLOTILLAS Y TRANSPORTISTAS Seguridad y confianza EER MÁS

Page Load Overview

4.57s
Total Load Time
4.3 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:53%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:4,481 chars
Detector Agreement:100%
Language mismatch: Declared as en-US but detected as es

Website Classification

Primary Category

corporate business96% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
96%
government public service
95%
e-commerce shopping
95%
news media journalism
88%
documentation technical
83%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15108.160.157.163United States
AS63410PrivateSystems Networks
12142.250.154.95Google · CDNUnited States
AS15169Google LLC
12172.217.118.4Google · CDNUnited States
AS15169Google LLC
12142.251.127.94Google · CDNUnited States
AS15169Google LLC
12172.217.116.4Google · CDNUnited States
AS15169Google LLC
12172.217.119.4Google · CDNUnited States
AS15169Google LLC
12172.217.115.4Google · CDNUnited States
AS15169Google LLC
877--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T104C33C3156915472421747D4E0A2BB18B1B6931BEE4B49E8B3FD89BC5FC4EDE022771C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:m5u52BqM/+oEJQk0edcJOF8IGU4GMo4KuMzquUas1A1n98e5GWEk7:f54kQk0edcJ0Ew

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:122068:XBiBBxgAA0KYgsBSZbrUDS4GA1UiQCcL7CV1GCAeJCDxACaENIgxNgxCAZB6A0JAxighgAABwakwCA84CQYAtIoBg8tQqRBU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff000061f90d0000
Perceptual Hash:cbe4bc82c7b898c5
Difference Hash:d54131c9c399b923
Wavelet Hash:ff0001f9fd4d08b9
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data