ScanMalware.com

Security Scan Report: decantdelparaiso.cl

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5fce26c9-671c-44ef-a6e0-45b5ffa878f5Domain and IP registration (RDAP)/api/v1/rdap/5fce26c9-671c-44ef-a6e0-45b5ffa878f5How often this domain was scanned/api/v1/domain/stats/decantdelparaiso.clScan history for this domain/api/v1/domain/history/decantdelparaiso.cl?limit=15
This website contacted 17 IPs in 3 countries across 12 domains to perform 121 HTTP transactions. The main domain is decantdelparaiso.cl.

Submitted URL: https://decantdelparaiso.cl

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Compromised perfume shop serving an ErrTraffic/Exvicy ClickFix injection: a fake Cloudflare 'Human Verification' overlay that tricks Windows users into pasting Terminal commands, with payload host resolved via a Polygon smart contract (EtherHiding).

Risk Factors (5)
Injected ClickFix 'Human Verification' overlay instructs Windows users to open Terminal and paste attacker-supplied commands (Win+X social-engineering malware delivery)
Obfuscated injected script using Base64 XOR decoding and the Function() constructor to generate code at runtime
Blockchain-based payload hosting (EtherHiding) that resolves the overlay host from a Polygon smart contract, evading takedown
Threat-feed-listed resource hosts loaded via obfuscation: 1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co, ncheck-brows.beer
Fake Cloudflare challenge branding (Ray ID, 'Cloudflare-protected sites') impersonating Cloudflare to gain user trust
Domain age information unavailable

Details

Page Title

Inicio - Decant del Paraíso

Scan Type

public

Domain Name Analysis

Within the Chilean country-code top-level domain (.cl), 'decantdelparaiso.cl' is registered. The core label 'decantdelparaiso' covers 16 characters split between seven vowels and nine consonants. Tokenizing the label suggests 4 words: decant, del, para, iso. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://decantdelparaiso.cl

Page Load Overview

10.31s
Total Load Time
2.7 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:4,996 chars
Detector Agreement:80%

Website Classification

Primary Category

social media network92% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
92%
e-commerce shopping
78%
blog personal website
54%
government public service
48%
adult content
37%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
95.78.97.156Hillsboro, Oregon, United States
AS212317Hetzner Online GmbH
75.78.155.157Hillsboro, Oregon, United States
AS212317Hetzner Online GmbH
7142.251.152.119Google · CDNUnited States
AS15169Google LLC
7152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
7104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
735.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
731.77.16.64Amsterdam, North Holland, Netherlands
AS219337Fzco
7142.250.154.94Google · CDNUnited States
AS15169Google LLC
7142.251.157.119Google · CDNUnited States
AS15169Google LLC
12117--

Detected Technologies14

WordPressv7.0
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
WooCommerce
40%
LiteSpeed
40%
HTTP/3
40%
Elementorv4.1.3
40%
jQuery Migrate
20%
imagesLoaded
20%
Swiper
20%
Site Kitv1.180.0
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T185742A62B7A01839726F07EFA646724C78E9C67BE64E12E4F4FA921881E5FD3315170C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:dllTqA3NJiu54G84g6AJ1AgAvqAn5Gd5A2hGd+zzOyALjpCU+daJieUmNefVziz7:dllTqIunEVnn5Gd5A2hGd+y/y8S3Y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:351625:pgmIATCh4QBkyUkI0SERXZlTnBFIABXMGogADEQRM3KCIAAEJSCjLgSAEBBrEsiEtuFUnECGAFgTECNgRoEBytITMLQDspo6

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff400037054bffff
Perceptual Hash:b945ecb3968e1961
Difference Hash:6992626c5d5b2313
Wavelet Hash:ff000026050bffff
Color Hash:#7740bf

Other Hashes

Crop Resistant:6992626c5d5b2313,3654545250783131,654e5e5e5d2f0f98,1d2f23253b474e6e,c7872d3d1b2f2646

Scan History

Scan history not available

Unable to load historical scan data