ScanMalware.com

Security Scan Report: estemedicenter.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9f42ef88-f6db-45fe-b7b0-9ffd684929b5Domain and IP registration (RDAP)/api/v1/rdap/9f42ef88-f6db-45fe-b7b0-9ffd684929b5How often this domain was scanned/api/v1/domain/stats/estemedicenter.comScan history for this domain/api/v1/domain/history/estemedicenter.com?limit=15
This website contacted 18 IPs in 2 countries across 15 domains to perform 318 HTTP transactions. The main domain is estemedicenter.com and was registered 5 years ago.

Submitted URL: https://estemedicenter.com/

AI Security Verdict

Confirmed Scam

Confidence: 94%

9
Risk Score

Compromised WordPress cooking blog injected with the IClickFix/ClickFix EtherHiding loader; critical IDS alerts and a vetted malicious-kit match confirm active malware distribution — do not visit.

Risk Factors (5)
Known malicious IClickFix/ClickFix injection kit present in page body
Blockchain RPC (Ethereum Sepolia) connection used for EtherHiding payload retrieval
Critical IDS alerts for ClickFix C2 domain and exploit-kit landing/loader pages
Third-party scripts loaded from apiforxwork.com/.net flagged as APT UNC6691 malware
Hosting-site reputation: primary domain reported as a loader on a threat-intel feed
Domain age information unavailable

Details

Page Title

Кулинарный сайт о еде

Scan Type

public

Domain Name Analysis

The domain name 'estemedicenter.com' uses the commercial generic top-level domain (.com) without a subdomain. The core label 'estemedicenter' covers 14 characters split between six vowels and eight consonants. Word splitting yields 3 words: este, medi, center. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://estemedicenter.com/

Page Load Overview

13.21s
Total Load Time
6.0 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:6,157 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog40% confidence
Type: dynamic
Method: structural

All Detected Categories

news/blog
40%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
29185.68.16.53Ukraine
AS200000Hosting Ukraine LTD
17142.251.110.95Google · CDNUnited States
AS15169Google LLC
17142.251.20.157Google · CDNUnited States
AS15169Google LLC
17172.67.187.123Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17142.251.13.94Google · CDNUnited States
AS15169Google LLC
17142.251.20.156Google · CDNUnited States
AS15169Google LLC
17172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17142.251.20.154Google · CDNUnited States
AS15169Google LLC
31818--

Detected Technologies8

X-UA-Compatible
100%
WordPressv6.9
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
Google AdSense
20%
HubSpot CMS
15%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17BB3F83691951C262213B2DDE050BB8CD16B8628FA37D67133F5273836D9CB781B267E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:1F7d9J5QypJYgrGx4hbmT4X9JOS4dkSB4gCWj4SxeSp4s/nOb4IfHNWW34oU244t:1RdFRHYghW8H+iFuKqIAQEQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:111158:BCZBBCDySkCTQxiBAEDQRAxwUJQyEaiIByojDFlEwDR8IoxgoiE5LBy0YBeEMQRKZQJcAxJBAAhMgghAyh2QLIcoAjWIoIcY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f173ffcfcffffbf
Perceptual Hash:8a04a5bd5adb95a5
Difference Hash:70e4e54949da5961
Wavelet Hash:1f171f7800ff0d15
Color Hash:#6640bf

Other Hashes

Crop Resistant:70e4e54949da5961,cec6cb3a79471e3c,25554e6971504955,c18989698c946169

Scan History

Scan history not available

Unable to load historical scan data