Security Scan Report: www.minervatics.com

Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 5 domains to perform 60 HTTP transactions. The main domain is minervatics.com and was registered 13 years ago.

Submitted URL: https://www.minervatics.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate Mexican IT-services site that has been compromised and now serves a ClearFake/ClickFix kit: a fake Cloudflare 'Human Verification' overlay pushes Windows users to paste a Terminal command, plus EtherHiding blockchain loader. Do not interact.

Risk Factors (5)
Compromised-site script injection: ClearFake Polygon EtherHiding loader and Windows ClickFix fake 'Human Verification' overlay
Fake Cloudflare-style verification prompt instructing visitors to open Terminal (Win+X) and paste a command — leads to malware/stealer installation
Suricata CRITICAL malware alert (EtherHiding exfiltration) and blockchain RPC contract lookups used to fetch the overlay host
Threat-intel matches against the primary domain across 2 independent feeds (clearfake, unknown loader)
Injected gambling/casino SEO-spam text in Azerbaijani, Swedish, Danish, Russian, Czech, Polish and German unrelated to the business
Domain age information unavailable

Details

Page Title

Minerva Tic´s – Soporte Técnico, Redes, Web y más

Scan Type

public

Domain Name Analysis

Domain 'www.minervatics.com' uses the commercial generic top-level domain (.com) with subdomain 'www'. The core label 'minervatics' covers 11 characters containing 4 vowels alongside 7 consonants. Splitting it apart reveals 2 words: minerva, tics. Expect 5.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.minervatics.com

Page Load Overview

3.93s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:43%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:6,381 chars
Detector Agreement:75%
Language mismatch: Declared as en-US but detected as es

Website Classification

Primary Category

corporate business96% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
96%
documentation technical
92%
technology software
80%
government public service
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12173.236.249.194Ashburn, Virginia, United States
AS26347New Dream Network, LLC
12142.251.14.95Google · CDNUnited States
AS15169Google LLC
12142.251.20.94Google · CDNUnited States
AS15169Google LLC
12104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
605--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ABE3E7B35688427E82125AE534347768D17B8836EA0693D4F7FFA38DD2E1DE12713938

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:kZNVAR9Rr7c/cujMCcypY8C3yaYWYgGcgeZMnK3pdw5:9R9tMMCcypY8C3yaYh5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:145496:8EUioA6EAGEQQFKoGMsKAAIlYBEKI3AKREASyxRQLCwIiS5dwQMCpBDOBwcAIdQAw4a0QFYAq6CfdMIZCRDOIADmdLVWFQAc

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffc183ffffff
Perceptual Hash:f94b9634694b4636
Difference Hash:22008b1b2b2b2a00
Wavelet Hash:00dfc18181c3cfff
Color Hash:#7994d2

Scan History

Scan history not available

Unable to load historical scan data