ScanMalware.com

Security Scan Report: encodelp.com

Redirected to:
https://www.encodelp.com/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d71fabd1-ab2e-4a7e-a8f5-2ec532224d18Domain and IP registration (RDAP)/api/v1/rdap/d71fabd1-ab2e-4a7e-a8f5-2ec532224d18How often this domain was scanned/api/v1/domain/stats/encodelp.comScan history for this domain/api/v1/domain/history/encodelp.com?limit=15
This website contacted 18 IPs in 2 countries across 15 domains to perform 66 HTTP transactions. The main domain is encodelp.com and was registered 7 years ago.

Submitted URL: https://encodelp.com

Effective URL:
https://www.encodelp.com/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate 7-year-old biotech research site apparently compromised: page injects a ClickFix 'Human Verification' EtherHiding loader (YARA + roster + CRITICAL IDS). Avoid visiting; no forms or brand impersonation present.

Risk Factors (5)
Injected ClickFix/EtherHiding malware loader confirmed by YARA and kit-roster ground truth
Critical network IDS malware/exfiltration alerts tied to blockchain contract host lookups
Threat-feed domains concealed inside obfuscated JavaScript
Unranked script host cloud-browse.codes with multi-feed exploit-kit (ClearFake) reputation
Indicators of Compromise on the scanned domain itself (iclickfix) — single-source, unverified
Domain age information unavailable

Details

Page Title

Encode Ideas | An Alternative to Bank-Led Sell-Side Research

Scan Type

public

Domain Name Analysis

The domain name 'encodelp.com' uses the commercial generic top-level domain (.com) without a subdomain. The core label 'encodelp' covers 8 characters with 3 vowels and 5 consonants. Segmentation suggests two words: encode, lp. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://encodelp.com

Page Load Overview

3.54s
Total Load Time
860 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,257 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate70% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
70%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15192.124.249.159Menifee, California, United States
AS30148Sucuri
3192.178.170.95Google · CDNUnited States
AS15169Google LLC
3104.16.23.120Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
335.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
3104.16.24.120Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.20.94Google · CDNUnited States
AS15169Google LLC
6618--

Detected Technologies12

WordPressv7.0.2
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
Sucuri
40%
HTTP/3
40%
Yoast SEOv28.1
30%
jQuery Migrate
20%
Web Font Loader
20%
Google Tag Manager
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E143C6B3B2D406B6F64D8ED470D1A31AA5A5E107F91262A4F6FC134B5F64DE23873238

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:2jJHWSZdypGHAVHIIyMyWA6fvtUwYOuo0sCvEQ5eh:QHHypsKIIKWA6fvtUwYOmTu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:60086:AYhMqTbQHGaEksBiALAENaKgAYg0CCgYMSABCMr8BWICxIASBFog4Bs2wCqYjFAAHIAjoXDQNwEQmXJkkRrECCGAwAFgRWhF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f9df8fbfffffbf81
Perceptual Hash:bdd269c26f863990
Difference Hash:43383a602400232b
Wavelet Hash:b08c8898fcfe9f81
Color Hash:#931f3c

Other Hashes

Crop Resistant:43383a602400232b

Scan History

Scan history not available

Unable to load historical scan data