Security Scan Report: autobreak.co

Submitted: Completed: publiccompleted
This website contacted 22 IPs in 1 country across 11 domains to perform 118 HTTP transactions. The main domain is autobreak.co and was registered 12 years ago.

Submitted URL: https://autobreak.co

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Legitimate-looking 12-year-old Colombian coffee-vending site, but IDS and threat-intel show it loads ClickFix/EtherHiding malware (zvh4.com, gateway.tenderly.co) and its domain is flagged as a loader — likely compromised.

Risk Factors (5)
CRITICAL IDS malware alerts (ClickFix domains, EtherHiding exfiltration) tied to resources the page loads
Primary domain flagged as a malware loader in threat intelligence
Page loads zvh4.com, a domain corroborated as malware by two feeds
Blockchain RPC / Tenderly gateway usage consistent with EtherHiding-style script abuse
Anti-analysis: right-click/context-menu blocking implemented in JavaScript
Domain age information unavailable

Details

Page Title

Máquinas Dispensadoras de Café para Oficinas en Bogotá | AutoBreak

Scan Type

public

Domain Name Analysis

Domain 'autobreak.co' uses the Colombian country-code top-level domain (.co) while skipping any subdomain. Count 9 characters in 'autobreak' split between 5 vowels and four consonants. Segmentation suggests two words: auto, break. Median word length is 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://autobreak.co

Page Load Overview

6.82s
Total Load Time
4.0 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:4,452 chars
Detector Agreement:60%

Website Classification

Primary Category

corporate business86% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
86%
finance banking
85%
government public service
77%
adult content
77%
documentation technical
76%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13162.210.96.124United States
AS14555LiquidNet US LLC
535.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
5188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.153.119Google · CDNUnited States
AS15169Google LLC
5142.251.20.94Google · CDNUnited States
AS15169Google LLC
5172.217.118.4Google · CDNUnited States
AS15169Google LLC
5172.217.115.4Google · CDNUnited States
AS15169Google LLC
5172.217.112.4Google · CDNUnited States
AS15169Google LLC
5172.217.117.4Google · CDNUnited States
AS15169Google LLC
5172.217.119.4Google · CDNUnited States
AS15169Google LLC
11822--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T140C3C575A696747AB29A87B034607368B796F217CF039E8575FC0398CFC0FD62D26248

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:lfESyASwA7A0qAlBxfiK4dvZgcE+5/aGqYhWKcfPPMgAxVIf9/:DYUQEHvZgcE+5/aGqYhWKAPD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:124646:M4wFsyygFgxYA4CCMKwFgRJUEDckppQAQSAIMaKocxoFKw8AUAHRCItkpJhNSJxIEYPwiGFk0mZKCyZxaAwImA4AhSAQG4Yl

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00fff6c80000ff18
Perceptual Hash:d8f78f0959f04616
Difference Hash:9900249098f3b1b1
Wavelet Hash:00fffef80018ff18
Color Hash:#865c2d

Scan History

Scan history not available

Unable to load historical scan data