Security Scan Report: videntecuranderoafricano.com

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 3 domains to perform 14 HTTP transactions. The main domain is videntecuranderoafricano.com and was registered 4 years 6 months ago.

Submitted URL: https://videntecuranderoafricano.com

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Compromised site serving the analyst-vetted ClearFake blockchain loader: obfuscated EtherHiding script pulls a next-stage payload from Polygon RPC hosts. Avoid visiting; site owner should clean the injection.

Risk Factors (5)
Known malicious ClearFake blockchain-contract loader injected into the page
EtherHiding next-stage resolution via Polygon smart contract
Heavily obfuscated inline script concealing blockchain RPC hosts (1rpc.io, polygon.drpc.org, polygon.publicnode.com)
Primary domain reported as an unknown malware loader (single-source, unverified)
Compromised-site pattern typical of ClearFake: unrelated love-spell content hosting a Windows ClickFix payload chain
Domain age information unavailable

Details

Page Title

Vidente Africano - Amarres de amor | Recuperación de parejas

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'videntecuranderoafricano.com' is registered. Its registrable label 'videntecuranderoafricano' stretches across 24 characters split between eleven vowels and 13 consonants. Splitting it apart reveals 7 words: v, ident, ecu, rand, ero, africa, no. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://videntecuranderoafricano.com

Page Load Overview

0.73s
Total Load Time
129 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:458 chars
Detector Agreement:75%

Website Classification

Primary Category

corporate business52% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
52%
corporate
35%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6185.37.231.189Spain
AS60458Xnet Core Sl
4142.251.20.95Google · CDNUnited States
AS15169Google LLC
4192.178.183.94Google · CDNUnited States
AS15169Google LLC
143--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FD635D31D2D420393B5F83AE6313F19CF0AAE005C94557EAF0B0B56499C6AF255E3A7D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:rtnBoNZdypJsx1Gz1vk7HSjT0JnmT7bmmfB7D+17DJCgQXvHtxEqV/uNBgTxk60g:HWypmYFzsCTwJgMJjX0Pp3XT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:70523:H+YEEIJQCIhrADQgwiKgTgpBMw6QIpSLWEA0mGQBkACnA0CwAEXA0BCJYEAmcJYAcAIIF6hxICfEqCABoAAQSABJSYZFQJUW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9bff0400ffffffff
Perceptual Hash:bc38bcae4d6969a0
Difference Hash:333094b000000002
Wavelet Hash:008f9f00f0f0f0f0
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data