Security Scan Report: www.testmipagina.com

Site favicon
Submitted: Oct 11, 2026, 8:13:25 PMCompleted: Oct 11, 2026, 8:13:59 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Roster-anchored ClearFake Polygon/EtherHiding loader plus rival-kit cleanup injected into a compromised 17-year-old site, corroborated by multi-feed threat intel on the primary domain. Treat as malware-serving; do not interact.

Risk Factors (5)
ClearFake blockchain (Polygon/EtherHiding) contract loader injected into the page — CRITICAL phishing stage of a ClickFix malware chain
Rival-kit cleanup script present, blocking navigation and protecting a malicious overlay
Multi-feed threat-intelligence match identifying the primary domain as ClearFake malware
SEO-spam gambling/casino article content indicating the site has been compromised or repurposed
Unranked in Cisco Umbrella (no top-1M reputation) despite 17-year-old registration
Domain age information unavailable

Details

Page Title

TestMiPagina

Scan Type

public

Domain Name Analysis

The domain 'www.testmipagina.com' uses the commercial generic top-level domain (.com) and includes subdomain 'www'. Count 12 characters in 'testmipagina' split between five vowels and 7 consonants. It segments into 5 words: test, mi, pag, in, a. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.testmipagina.com

Page Load Overview

1.83s
Total Load Time
897 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:24%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:nl-NL
Text Length:2,158 chars
Detector Agreement:50%
Language mismatch: Declared as nl-NL but detected as es

Website Classification

Primary Category

social media network90% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
90%
gambling betting
41%
entertainment media
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
777.111.240.150Copenhagen, Capital Region, Denmark
AS51468One.com A/S
6142.251.20.95Google · CDNUnited States
AS15169Google LLC
6142.251.127.95Google · CDNUnited States
AS15169Google LLC
193--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F0F3F951437C0AF9346F8B689D1BF705F291A981DE8692DBF1B2D100A4DDAF524B3B0E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:w0NlAA99jPh1VJOZrbwemlUVugOmDZrbzemlUVugOmmZrbLemlUVugOm9Zrb3emz:gA9VVJOZrbwemlUVugOmDZrbzemlUVu2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:172013:SoQWgDciAzKUDCHSB5oIMQBwFhSgWgxOblgYiQGwCVbgQJDFgmwIDiBQZUEDIiDfAYoSGGjREOwACQDtRAYkqFlDJA9lkEoA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00fffffff9fbffff
Perceptual Hash:cd1630693f366969
Difference Hash:968c606063430402
Wavelet Hash:000000bfb9f9fbfb
Color Hash:#7f79d2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data