Security Report: www.wonderfulecuador.org - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a5c80818-29c3-4fea-ae6c-7ab6b185997d Domain and IP registration (RDAP)/api/v1/rdap/a5c80818-29c3-4fea-ae6c-7ab6b185997dHow often this domain was scanned/api/v1/domain/stats/wonderfulecuador.org Scan history for this domain/api/v1/domain/history/wonderfulecuador.org?limit=15

This website contacted 9 IPs in 2 countries across 9 domains to perform 33 HTTP transactions. The main domain is wonderfulecuador.org and was registered 16 years ago.

Submitted URL: https://www.wonderfulecuador.org

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Established football-news WordPress site appears compromised and now serves a ClickFix/EtherHiding malware campaign: primary domain and host IP carry multi-feed malware Threat Intelligence plus critical IDS alerts. Avoid.

Risk Factors (6)

Primary domain matched by multi-feed content-malware Threat Intelligence (clearfake / unknown loader)

Hosting IP flagged as an exploit-kit 'ek clearfake' by two independent feeds

Critical IDS malware alerts for EtherHiding exfiltration and a ClickFix domain

Page scripts connect to multiple blockchain RPC endpoints consistent with on-chain payload retrieval

Compromised/default WordPress footprint with unrelated injected content

Third-party resources checkyoubrowse.codes and rpc-mainnet.matic.quiknode.pro flagged as malicious hosts

Domain age information unavailable

Details

Page Title

www.wonderfulecuador.org - https://www.wonderfulecuador.org

Scan Type

public

Favicon Hash

MMH3: 1198047028

MD5: 000bf649cc8f6bf27cfb04d1bcdcd3c7

Domain Name Analysis

The domain name 'www.wonderfulecuador.org' uses the non-profit oriented generic top-level domain (.org) and includes subdomain 'www'. Its registrable label 'wonderfulecuador' stretches across 16 characters holding 7 vowels versus nine consonants. Splitting it apart reveals 2 words: wonderful, ecuador. Expect eight characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

16.84s

Total Load Time

2.2 MB

Total Size

Language Analysis

Primary Language

🇹🇭Thai

Code: th

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:th

Text Length:8,317 chars

Detector Agreement:60%

Website Classification

Primary Category

corporate50% confidence

Type: dynamic

Method: structural

All Detected Categories

corporate

50%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	192.0.73.2	San Francisco, California, United States	AS2635Automattic, Inc
3	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
3	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
3	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
3	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
33	9	-	-