Security Scan Report: refocusanalytics.com

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 3 domains to perform 6 HTTP transactions. The main domain is refocusanalytics.com and was registered 14 years ago.

Submitted URL: https://refocusanalytics.com/

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Hacked/defaced host serving a 'Markas Escobar 1337' hacking panel: RCE reverse shell, WHM/cPanel account abuse and file upload tools, plus malware threat-intel hits on the domain and a PHP path. Do not interact.

Risk Factors (5)
Two content-malware indicators (primary domain and PHP path) on the scanned host
Overt hacking/webshell toolkit: RCE handler, reverse shell, WHM account termination/suspension, file uploader
Simulated root shell and 'FULL ACCESS / ONLINE' operator styling typical of defacement or compromised-host panels
No legitimate business pages, legal notices, or contact information; only Telegram handles
Unranked domain despite 14-year registration — consistent with a compromised or repurposed host
Domain age information unavailable

Details

Page Title

MARKAS ESCOBAR // CYBER COMMAND CENTER

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'refocusanalytics.com' is registered. Its registrable label 'refocusanalytics' stretches across 16 characters split between 6 vowels and ten consonants. Tokenizing the label suggests two words: refocus, analytics. Average segment length settles at 8 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://refocusanalytics.com/

Page Load Overview

0.72s
Total Load Time
50 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:61%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:id
Text Length:3,573 chars
Detector Agreement:100%
Language mismatch: Declared as id but detected as en

Website Classification

Primary Category

technology software51% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
51%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2109.199.105.207Lauterbourg, Grand Est, France
AS51167Contabo GmbH
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
2142.251.20.94Google · CDNUnited States
AS15169Google LLC
63--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BE53C67166F41036A017DDE667F29F1A3BA99083E50B862873BC01E89FF5DD4EE03A54

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:EaWouxyxdmcs1S3I0GvxHQQCRmCCABdU4wyV2M5yozJgKoX8OBp1GQS6pMJ:KFcX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:64349:IliLTQ+ApAAAQMFhHAMkDAIRCwIJOMY8k1AoGMgpgOIURR8CAEuagE4CCAUlRwC4WlmoMJEUqwUQhosbiEkxAICAwzgESBFE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:81d9990111011113
Perceptual Hash:88d9e43337269bcc
Difference Hash:0531313131b33737
Wavelet Hash:e1d9d9d1191b1b13
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data