ScanMalware.com

Security Scan Report: ednatafur.com

Site favicon
Submitted: Completed: publiccompleted

AI Security Verdict

High Risk

Confidence: 60%

7
Risk Score

A personal/political candidate site with self-branding and a plain contact form (no credential or payment fields), but its own primary domain is flagged by a single unverified threat-intel source as a malware loader.

Risk Factors (2)
Single-source threat-intel match naming the primary domain as an 'unknown loader (malware)' — a compromise/loader pattern, unverified and uncorroborated
Unranked domain (not in Cisco Umbrella top 1M) with low business-legitimacy score (10/100)
Domain age information unavailable

Details

Page Title

Edna Tafur

Scan Type

public

Domain Name Analysis

The domain 'ednatafur.com' uses the commercial generic top-level domain (.com). The second-level label 'ednatafur' is 9 characters long holding 4 vowels versus five consonants. Splitting it apart reveals 3 words: edna, ta, fur. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ednatafur.com

Page Load Overview

5.86s
Total Load Time
3.6 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:5,340 chars
Detector Agreement:67%

Website Classification

Primary Category

healthcare medical62% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
62%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14107.180.117.213United States
AS398101GoDaddy.com, LLC
6192.178.183.95Google · CDNUnited States
AS15169Google LLC
6192.178.183.97Google · CDNUnited States
AS15169Google LLC
6142.251.156.119Google · CDNUnited States
AS15169Google LLC
623.207.210.148Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
6157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
6142.251.14.94Google · CDNUnited States
AS15169Google LLC
6216.239.34.36Google · CDNUnited States
AS15169Google LLC
623.67.142.207Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
6142.251.154.119Google · CDNUnited States
AS15169Google LLC
8613--

Detected Technologies11

WordPressv7.1.3
100%
MetaGenerator
100%
JQueryv3.7.1
100%
Google-AnalyticsvUniversal
100%
PHP
50%
MySQL
50%
Cloudflare
50%
reCAPTCHA
45%
Google Analytics
35%
Cloudflare Turnstile
30%
Facebook Pixel
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19E93D8323B891477225F07CFC157750E81C6EBB7D661A6E8B3B311F9A0B4CA532A3265

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:FFyp3rPMqapSFmIzW8l0/y34k5ghdgWuyGHknjXURxb:FA1oN3/y34bhdgWuyGEnoXb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:91784:qIbYPgFgGAdqYBAAYAIAih0QIENGCAuIIIChtUXFSIiTQolADDBswWItACkVFIAWYWACTCHeAkRJsnkCwDANdIoIAMDMAhQ4

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff8181818181f1f1
Perceptual Hash:ea97c497d0c03fc4
Difference Hash:5f333309492b2723
Wavelet Hash:ff8181c58581f1f9
Color Hash:#4077bf

Other Hashes

Crop Resistant:5f333309492b2723,f0f07196d0f0c08c,4c4492da18324343,f9f12d9ccced6361

Scan History

Scan history not available

Unable to load historical scan data