Security Scan Report: www.xn--mercadolibr-89a.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 4 domains to perform 13 HTTP transactions. The main domain is xn--mercadolibr-89a.com and was registered 2 years ago.

Submitted URL: https://www.xn--mercadolibr-89a.com

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Lookalike Punycode domain 'mercadolibrè.com' impersonates MercadoLibre but only shows an under-construction placeholder. No forms or malware yet, but the deceptive hostname is a strong typosquatting signal — avoid entering any data.

Risk Factors (4)
Punycode/Unicode homograph typosquatting of the MercadoLibre brand on a non-official domain
Unranked, zero-reputation domain carrying a major brand's name
Empty under-construction placeholder — typical staging state for a freshly acquired lookalike domain awaiting a phishing kit
No disclosure that the site is unaffiliated with MercadoLibre
Domain age information unavailable

Details

Page Title

Próximamente

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www.xn--mercadolibr-89a.com' is registered; it also runs on subdomain 'www'. The second-level label 'xn--mercadolibr-89a' is 19 characters long with 5 vowels and nine consonants, notching two digits and three hyphens. Splitting it apart reveals six words: xn, mercado, li, br, 89, a. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

4 x gd a, En construcción. Regresa pronto para ver las novedades.

Page Load Overview

0.79s
Total Load Time
884 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:53%
Script:Latin
Direction:ltr

Detection Details

Text Length:85 chars
Detector Agreement:100%

Website Classification

Primary Category

real estate property67% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

real estate property
67%
e-commerce shopping
64%
news media journalism
55%
entertainment media
43%
government public service
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5198.185.159.145Squarespace · CLOUDUnited States
AS53831Squarespace, Inc.
2142.251.127.95Google · CDNUnited States
AS15169Google LLC
2146.75.120.237Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
2192.178.183.94Google · CDNUnited States
AS15169Google LLC
2198.49.23.144Squarespace · CLOUDUnited States
AS53831Squarespace, Inc.
135--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T111512459BC81902F8B61C1812362F73CE1C8932AC78AD7D5F67905967FCEACE049719C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:Ev+lSJfLvsd4VAo4UElnJHaQciOZaQcvdDaQcvqaQci2aQcv1XKaUbBnBMUlBRU4:Ev+lyfTsd4OoElJHoiOZolDoCoi2oFK3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2897:AAICAAAQABBgAABQICBoRICAIAgAABAAJkAgAIAAAAAAAoAAAUyAAIAASAgAgQAISgAZBgAAIAAABAEAAAEggAAAIEBA0IgA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f8fcb8f0f0e0c080
Perceptual Hash:ed9f3af0c038c10f
Difference Hash:123060e2c2931363
Wavelet Hash:f8fcf8f8f0e0c090
Color Hash:N/A

Other Hashes

Crop Resistant:123060e2c2931363

Scan History

Scan history not available

Unable to load historical scan data