ScanMalware.com

Security Scan Report: estebanmasis.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ce1dece3-ddfb-4d43-bda7-eca3ef0bc5c1Domain and IP registration (RDAP)/api/v1/rdap/ce1dece3-ddfb-4d43-bda7-eca3ef0bc5c1How often this domain was scanned/api/v1/domain/stats/estebanmasis.comScan history for this domain/api/v1/domain/history/estebanmasis.com?limit=15
This website contacted 3 IPs in 1 country across 3 domains to perform 59 HTTP transactions. The main domain is estebanmasis.com and was registered 10 years ago.

Submitted URL: https://estebanmasis.com

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Legitimate Costa Rican comedy site whose WordPress installation is compromised and serving an analyst-vetted IClickFix/EtherHiding loader with critical IDS malware alerts; do not load or interact with it.

Risk Factors (3)
Known malicious ClickFix/EtherHiding kit injected into a compromised WordPress site
Critical IDS malware alerts and blockchain-based staged payload retrieval
Page content mixed with unrelated gambling SEO spam injected into a legitimate site
Domain age information unavailable

Details

Page Title

Stand up comedy sobre discapacidad, sociedad y demás cosas cotidianas

Scan Type

public

Domain Name Analysis

Domain 'estebanmasis.com' uses the commercial generic top-level domain (.com) with no subdomain. Count 12 characters in 'estebanmasis' split between 5 vowels and 7 consonants. Tokenizing the label suggests three words: esteban, mas, is. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://estebanmasis.com

Page Load Overview

8.57s
Total Load Time
5.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:48%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:9,644 chars
Detector Agreement:75%
Language mismatch: Declared as es but detected as en

Website Classification

Primary Category

entertainment media57% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
57%
forum community discussion
26%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21198.23.51.173United States
AS14555LiquidNet US LLC
19172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
19188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
593--

Detected Technologies7

WordPressv7.1
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
WordPress Block Editor
30%
UltimatelySocial
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T154833A3284E414B72A0B43A8E164B75CE96AD520CF43DEB5B5FE615CABC4DF304A3A0D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:s5F7d9JMmQg5Mmjx+qehFP018ypoh8bqRrNAQzTh2Iq2jRk+yaPOGgymhFgDozeW:wRdYmQg5Mmjx+qehFP01Neh8IOXO5QDF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:84837:iJgofMgAcIHDA1AKOygy4WCyERwBBkQYnuAgyAoYABAwVogrABpgygx7AgjkBsBJiYGdQMIRJgAh0fiQAUIEhgaAHUYQZMLI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00007f7f3f3f7f33
Perceptual Hash:8f72651b4dc017e5
Difference Hash:61e1e8f0f070f2f6
Wavelet Hash:00007f7f3f3f7b00
Color Hash:#b7bf40

Other Hashes

Crop Resistant:61e1e8f0f070f6f6,61e1e8f0f070f2f6

Scan History

Scan history not available

Unable to load historical scan data