Security Report: elinfame.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/73cd2c3a-1bd4-47e9-abe3-629949bbb3a9 Domain and IP registration (RDAP)/api/v1/rdap/73cd2c3a-1bd4-47e9-abe3-629949bbb3a9 Certificate Transparency/api/v1/ct/elinfame.com How often this domain was scanned/api/v1/domain/stats/elinfame.com Scan history for this domain/api/v1/domain/history/elinfame.com?limit=15

This website contacted 11 IPs in 3 countries across 10 domains to perform 41 HTTP transactions. The main domain is elinfame.com and was registered 21 years ago.

Submitted URL: https://elinfame.com

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Compromised WordPress poetry blog serving EtherHiding/ClearFake-style malware: five critical EtherHiding exfil IDS alerts, blockchain C2/RPC traffic, and a loaded exploit-kit host. No phishing forms, but avoid the site.

Risk Factors (5)

CRITICAL EtherHiding exfiltration IDS alerts tied to blockchain smart-contract C2

Compromised WordPress blog (self-branded poetry site) serving injected malicious script

Loaded resource from a host flagged as a ClearFake exploit kit

Primary domain itself reported as a malware loader

Multiple blockchain RPC calls and on-chain getDomain() contract queries

Domain age information unavailable

Details

Page Title

EL INFAME ESCRITOR – My WordPress Blog

Scan Type

public

Favicon Hash

MMH3: -1375925876

MD5: 8d9ce80a7f59b390236542344d5b1b74

Domain Name Analysis

You're looking at domain 'elinfame.com' on the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'elinfame' spans 8 characters containing 4 vowels alongside four consonants. It segments into 2 words: elin, fame. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.64s

Total Load Time

481 KB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:1,118 chars

Detector Agreement:50%

Website Classification

Primary Category

adult content58% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content

58%

blog personal website

38%

gambling betting

31%

news media journalism

30%

entertainment media

26%

Detected Features

Articles

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	162.241.61.68	Vinhedo, São Paulo, Brazil	AS31898Oracle Corporation
3	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	192.0.76.3	San Francisco, California, United States	AS2635Automattic, Inc
3	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
3	104.18.10.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
3	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
3	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
41	11	-	-