Security Scan Report: encuentro991.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 38 IPs in 2 countries across 21 domains to perform 140 HTTP transactions. The main domain is encuentro991.com and was registered 3 months ago.

Submitted URL: https://encuentro991.com

AI Security Verdict

High Risk

Confidence: 90%

8
Risk Score

Legitimate-looking Colombian radio site that has been compromised: an analyst-vetted ClearFake blockchain loader (EtherHiding/ClickFix chain) is injected into the HTML, with injected casino SEO spam. Visitors risk malware; do not interact.

Risk Factors (4)
ClearFake blockchain contract loader (EtherHiding) injected into the page — analyst-vetted malicious kit, CRITICAL phishing category
Primary domain flagged as a malware loader in threat intelligence (single-source)
Injected Russian-language online-casino SEO spam content unrelated to the radio station's subject matter
Multiple JavaScript-obfuscator IDS heuristics firing on the page
Domain age information unavailable

Details

Page Title

Encuentro 99.1 Fm – Una comunidad en acción

Scan Type

public

Domain Name Analysis

You're looking at domain 'encuentro991.com' on the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'encuentro991' spans 12 characters with 4 vowels and 5 consonants, along with three digits. Breaking it apart gives 5 words: en, cue, n, tro, 991. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://encuentro991.com

Page Load Overview

7.86s
Total Load Time
22.2 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:6,886 chars
Detector Agreement:60%

Website Classification

Primary Category

documentation technical43% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
43%
adult content
41%
gambling betting
37%
entertainment media
31%
news media journalism
26%

Detected Features

Search
Articles
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
29144.76.161.109Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
3142.251.13.95Google · CDNUnited States
AS15169Google LLC
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3146.75.122.217Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
3142.250.154.119Google · CDNUnited States
AS15169Google LLC
3188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.20.94Google · CDNUnited States
AS15169Google LLC
3142.251.152.4Google · CDNUnited States
AS15169Google LLC
3144.76.2.94Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
14038--

Detected Technologies7

WordPressv7.1.3
100%
JQueryv3.7.1
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E4541832B0A60436215F15CDAA763B0C30A6C627D947CAD9F7FF1298CFE2DD0A593259

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:iZNVAR9S18+vIRpffbIpwldOg1X+CWsCaXHuBqYZtflCWOmlWaky0U4pN:nR9hHIpwld5+CWsCaXHuBqY3w

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:281362:FWAACNqEQjEAYcVhA8SayqUQ4UQiURAiCcIQIKxkiAkgYYoAZCTQaqhLHCEkD0YIJpooUyRHCCsAADA0CI0mAIKDgA6ANJRI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3c3c3c3fbd3c3c3
Perceptual Hash:ed3092c7936c693c
Difference Hash:2f37370b33232307
Wavelet Hash:c3c3c3c3c3c3c3c3
Color Hash:#5cac53

Scan History

Scan history not available

Unable to load historical scan data