Security Scan Report: www.edicionesatalanta.com

Redirected to:
https://www.collinruggnews.com/pat-ryans-dual-stadium-play-inside-the-...
Site favicon
Submitted: Oct 3, 2026, 12:58:45 AMCompleted: Oct 3, 2026, 12:59:39 AMpubliccompleted

This website contacted 12 IPs in 5 countries across 3 domains to perform 28 HTTP transactions. The main domain is collinruggnews.com and was registered 2 weeks ago.

Submitted URL: https://www.edicionesatalanta.com/blog/pat-ryans-dual-stadium-play-inside-the-new-ryan-field-opening-and-the-push-to-keep-the-bears-in-illinois/

Effective URL:

https://www.collinruggnews.com/pat-ryans-dual-stadium-play-inside-the-...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 58%

4
Risk Score

Low-quality news/content-farm page reached via a cross-domain redirect from a 7-day-old host; no credential or payment form, no impersonation of another entity, and no threat-intel, YARA or IDS hits. Anti-analysis JS and an unrelated off-site analytics fetch keep it at moderate rather than clean.

Risk Factors (5)
Cross-domain redirect from a 7-day-old unrelated publisher domain to the destination site (weak, non-escalating prior)
Anti-analysis JavaScript: right-click/context menu blocked and one anti-analysis technique detected
Inline scripts contain encoding/decoding routines (obfuscation-adjacent, weak signal on its own)
Off-site fetch to stat.lepsidomov.blog, an unranked, unrelated .blog host
Destination domain carries only a low Cisco Umbrella rank (#767268) and its age could not be established; article date ('October 3, 2026') and thin AI-style filler content suggest a low-quality content-farm operation
Safety Factors (5)
og:type=article — news/blog content that merely reports on named people and brands (Pat Ryan, Northwestern, Chicago Bears, Roger Goodell)
Verified form facts: 0 password fields, 0 disguised password fields, 0 payment fields — no credential or payment capture
The single form is a standard WordPress comment form posting same-origin to wp-comments-post.php
No Indicators of Compromise, no JavaScript YARA malware hits, no known malicious kit, no network IDS alerts
All JavaScript is served from the site's own domain; cross-origin form post to collinruggnews.com was evaluated as a legitimate same-brand flow, and no credential exfiltration was detected
Domain age information unavailable

Details

Page Title

Pat Ryan’s Dual Stadium Play: Inside the New Ryan Field Opening and the Push to Keep the Bears in Illinois | Collin Rugg News

Scan Type

public

Domain Name Analysis

The domain name 'www.edicionesatalanta.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'www'. Count 17 characters in 'edicionesatalanta' split between nine vowels and eight consonants. Tokenizing the label suggests 4 words: ed, ici, ones, atalanta. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.edicionesatalanta.com/blog/pat-ryans-dual-stadium-play-inside-the-new-ryan-field-opening-and-the-push-to-keep-the-bears-in-illinois/

Page Load Overview

18.70s
Total Load Time
893 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:7,229 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog90% confidence
Type: dynamic
Method: structural

All Detected Categories

news/blog
90%
corporate
70%

Detected Features

Articles
Comments
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2134.0.9.215Spain
AS19771210dencehispahard, S.L.
2104.21.66.53Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
283.97.79.47Madrid, Madrid, Spain
AS62005BlueVPS OU
2104.19.220.32Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2152.89.28.130Lithuania
AS44901Belcloud LTD
291.134.35.217France
AS16276OVH SAS
2188.119.123.242Warsaw, Mazovia, Poland
AS62005BlueVPS OU
2192.178.183.95Google · CDNUnited States
AS15169Google LLC
2142.251.20.94Google · CDNUnited States
AS15169Google LLC
2812--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F4247EF2BB3815392F3B4391B0AA224B71768537E74944E0F629CC985B89DD32177B6C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:zAqDaOyd2TAb8R490RyOl9fDD44ofF5pejZTXF3ft17CKgs9Yf/OE4:zReLOzDD44Mjpev2/OF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:217869:aMBwBnbBYIgwJgsKwKIQHALUVRBDlsitoEBYkohmKAUCC4kA+CAKDzCoRA0AkgQpZSCx5gg2hdEE4AiIkEEYQXwWFIAHAagA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff20fff3f1818181
Perceptual Hash:e996306fe1b4938c
Difference Hash:8cc7382703033313
Wavelet Hash:ff00fff3e1818181
Color Hash:#7ad22d

Scan History

Scan history not available

Unable to load historical scan data