Security Scan Report: visco-foam.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 14 IPs in 2 countries across 10 domains to perform 145 HTTP transactions. The main domain is visco-foam.com and was registered 13 years ago.

Submitted URL: https://visco-foam.com

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Legitimate pillow manufacturer whose site is compromised: an obfuscated EtherHiding/ClickFix loader pulls a next stage from a blockchain contract, with a CRITICAL malware IDS alert. Do not browse; no forms are involved.

Risk Factors (4)
Injected EtherHiding/ClickFix loader with a decrypted second stage retrieved from a smart contract
Obfuscated script concealing threat-feed blockchain RPC hosts
CRITICAL IDS malware alert indicative of data exfiltration by a trojan
Content-malware threat-intel entry on the primary domain (single-source, unverified)
Domain age information unavailable

Details

Page Title

Home 01 - Visco-Foam - Viscoelastic Pillows

Scan Type

public

Domain Name Analysis

The domain 'visco-foam.com' uses the commercial generic top-level domain (.com). Count 10 characters in 'visco-foam' split between 4 vowels and five consonants; it also includes 1 hyphen. Splitting it apart reveals 3 words: vis, co, foam. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

821 visco-foam@visco-foam.es @_ +34:961 203 022 Products v Internationalization ‘Sustainability Contact Visco-Foam.. Febncaln dena y predicts ecole PILLOW SUPPLIER IN SPAIN Manufacturers Of High Q...

Page Load Overview

10.25s
Total Load Time
8.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:55%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:12,025 chars
Detector Agreement:100%
Language mismatch: Declared as es but detected as en

Website Classification

Primary Category

documentation technical93% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
93%
education learning
86%
e-commerce shopping
64%
download file sharing
47%
healthcare medical
38%

Detected Features

Search
Articles
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1586.109.170.67Spain
AS196713Abansys & Hostytec, S.L.
10192.178.183.97Google · CDNUnited States
AS15169Google LLC
10192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
10142.251.13.113Google · CDNUnited States
AS15169Google LLC
10142.251.14.94Google · CDNUnited States
AS15169Google LLC
10192.178.183.95Google · CDNUnited States
AS15169Google LLC
10142.251.13.94Google · CDNUnited States
AS15169Google LLC
1035.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
10104.21.5.110Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10142.251.13.97Google · CDNUnited States
AS15169Google LLC
14514--

Detected Technologies15

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1982494213D8A1C3A215F02CFA05B260C60DBDFF6E552A4E5F4BF522467F6CA077A3166

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:VYNZYkHeAkTaYK/ufXkAA1lSBvtMMvf+KAb/oscGaOvQXQyz6bdmIos+OoDjsNO3:VycaYK/ufXkrSBvtMMSb/SGhm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:225381:pFhRYrkTMwiGglYhAIIxAiRKQ0ISAMACaDlLGRwALMgCTFGqAMBEoQqyAigQlhdIkwCgTAAQCEizpKQiQe4QHAWlQgmgSyRI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000013d3d19037f
Perceptual Hash:8b6c750ddb25218f
Difference Hash:86f187e961f3d7d8
Wavelet Hash:0001013f3d3f1fff
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data