ScanMalware.com

Security Scan Report: markasescobar.com

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7f0c2da3-ee0b-4c22-bbac-df41c3c6ee11Domain and IP registration (RDAP)/api/v1/rdap/7f0c2da3-ee0b-4c22-bbac-df41c3c6ee11How often this domain was scanned/api/v1/domain/stats/markasescobar.comScan history for this domain/api/v1/domain/history/markasescobar.com?limit=15
This website contacted 3 IPs in 1 country across 3 domains to perform 6 HTTP transactions. The main domain is markasescobar.com and was registered 7 months ago.

Submitted URL: https://markasescobar.com/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Unranked 221-day-old host flagged as malware in threat intel, openly offering WHM/cPanel takeover panels, reverse-shell RCE and file-upload tools — a criminal hacking toolkit; avoid.

Risk Factors (5)
Content-malware threat-intel match on the primary domain and on an on-host PHP path
Distribution/promotion of server takeover and remote-command-execution tooling
Reverse IP/subdomain harvesting and domain-grabber tooling aimed at target reconnaissance
No legitimate business identity, legal pages or corporate footprint; reachable only via Telegram
Unranked domain with minimal legitimacy indicators
Domain age information unavailable

Details

Page Title

MARKAS ESCOBAR // CYBER COMMAND CENTER

Scan Type

public

Domain Name Analysis

The domain name 'markasescobar.com' uses the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'markasescobar' spans 13 characters holding five vowels versus eight consonants. Tokenizing the label suggests 3 words: mark, as, escobar. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://markasescobar.com/

Page Load Overview

0.61s
Total Load Time
51 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:61%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:id
Text Length:3,573 chars
Detector Agreement:100%
Language mismatch: Declared as id but detected as en

Website Classification

Primary Category

technology software51% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
51%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2172.67.191.30Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
2142.251.20.94Google · CDNUnited States
AS15169Google LLC
63--

Detected Technologies5

HTTP/3
40%
HSTS
40%
Cloudflare Bot Management
40%
Cloudflare
40%
cPanel
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E553C57166F41036A017DDE667F29F2A3BA99083E50B852873BC01E89FF5DD4EE03A54

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:EaWouxyxdmcs1S3I0Gvxl88+4QBAqMM6Ruar1q2r84Spn2S0TU7zGQS6pMJ:KF+sX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:64350:CAESABWkSIIpSMMhkAoAYAAuCIpGFwUgtVBITRABwQIbTJUBBQlDIJU5AQlEAEiKaAMlhAGELRELAAAhihUEUpKMQAAWkoAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:81d9990111011111
Perceptual Hash:88d9a63337269bcc
Difference Hash:0531313131333737
Wavelet Hash:e1d9d9d1191b1b13
Color Hash:N/A

Other Hashes

Crop Resistant:56460c800000200e,0531313131333737

Scan History

Scan history not available

Unable to load historical scan data