Security Scan Report: enjoy-nicaragua.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 6 domains to perform 138 HTTP transactions. The main domain is enjoy-nicaragua.com and was registered 3 years 2 months ago.

Submitted URL: https://enjoy-nicaragua.com

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Legitimate-looking Nicaragua travel site whose page carries an injected, roster-confirmed ClickFix fake 'Human Verification' loader — treat as a compromised domain serving malware; do not follow its instructions.

Risk Factors (3)
Known malicious ClickFix 'Human Verification' overlay kit detected on the page by analyst-vetted roster and YARA signature
Injected packed loader that retrieves its payload host from a blockchain smart contract (anti-takedown evasion)
Single-source threat-intelligence match labeling the primary domain as malware-related
Domain age information unavailable

Details

Page Title

Enjoy Nicaragua

Scan Type

public

Domain Name Analysis

You're looking at domain 'enjoy-nicaragua.com' on the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'enjoy-nicaragua' spans 15 characters containing seven vowels alongside 7 consonants; it also includes one hyphen. Word splitting yields 2 words: enjoy, nicaragua. Expect 7 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://enjoy-nicaragua.com

Page Load Overview

11.21s
Total Load Time
9.8 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:13,047 chars
Detector Agreement:67%

Website Classification

Primary Category

travel tourism79% confidence
Type: spa
Method: ml+structural

All Detected Categories

travel tourism
79%
adult content
37%
government public service
30%
download file sharing
28%
phishing scam
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1968.178.244.146United States
AS398101GoDaddy.com, LLC
17142.251.127.95Google · CDNUnited States
AS15169Google LLC
1754.192.35.96Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
17142.250.154.94Google · CDNUnited States
AS15169Google LLC
17142.251.20.132Google · CDNUnited States
AS15169Google LLC
1754.192.35.57Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1754.192.35.90Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1754.192.35.3Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1388--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12F14E773B3410E3B529B41C6D056324F51E6DA4FD92240EDB7B305ECF2B9CA2367A629

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:fi0KBoRE1d0mAmJWm0p+7He0p+7AbC0p+7AHN0p+7AQ80p+7AmY0p+7A7F0p+7Av:HRE1d0mAaW0dCcWGVtP3ECw5aos

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:207047:CCIOgDghUCAAAgC6qIGQEAUhqKVJghhQAAoQQQCUgk0ENemORmwAIjQGHQDDPyGLQIwZUBMbFJEECgB1OiUAEAQOFBFFIzJK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bfffffe72707c7ff
Perceptual Hash:b3cccc3733c81ac6
Difference Hash:686018484c4c9636
Wavelet Hash:3efeeea42700c383
Color Hash:#40acbf

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data