ScanMalware.com

Security Scan Report: 0225958080.com

Submitted: Sep 12, 2026, 6:13:49 PMCompleted: Sep 12, 2026, 6:16:26 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Legitimate-looking Taipei pawnshop site, but a CRITICAL EtherHiding exfiltration IDS alert, a malware-loader IoC on the primary domain, and the corroborated iclickfix malware resource xaz2.com indicate the site is compromised and serving hidden blockchain-based malicious code.

Risk Factors (5)
Critical EtherHiding malware exfiltration IDS alert during page load
Primary domain flagged as malware loader in threat intelligence
Corroborated malware-flagged third-party resource (xaz2.com) loaded by the page
Blockchain RPC (gateway.tenderly.co / Sepolia) usage indicative of blockchain C2/hidden payload technique
Domain not ranked in Cisco Umbrella top 1M despite 3+ years of registration
Domain age information unavailable

Details

Page Title

台北當舖 - 永元當舗

Scan Type

public

Domain Name Analysis

The domain '0225958080.com' uses the commercial generic top-level domain (.com). Its registrable label '0225958080' stretches across 10 characters holding zero vowels versus 0 consonants; it also includes ten digits. Word splitting yields 1 word: 0225958080. Median word length is 10 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://0225958080.com

Page Load Overview

90.73s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-TW
Text Length:4,494 chars
Detector Agreement:75%

Website Classification

Primary Category

news/blog35% confidence
Type: spa
Method: ml+structural

All Detected Categories

news/blog
35%
corporate
35%
finance banking
34%
adult content
33%
social media network
30%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16103.17.8.35Taiwan
AS131149Yuan-Jhen Info., Co., Ltd
12142.251.13.97Google · CDNUnited States
AS15169Google LLC
12142.251.127.95Google · CDNUnited States
AS15169Google LLC
12142.251.157.119Google · CDNUnited States
AS15169Google LLC
12216.239.36.178Google · CDNUnited States
AS15169Google LLC
12188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12142.251.154.119Google · CDNUnited States
AS15169Google LLC
12192.178.183.148Google · CDNUnited States
AS15169Google LLC
1235.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
12142.250.154.94Google · CDNUnited States
AS15169Google LLC
12410--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12BC386B4B0B1172C756F939BE367B6ECA2706122EE06CBD5E2B3104436591FB15A870F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:y56piCh8myp5eqgs9dUe2SfPlKXbc4hnINN:Llh8fDeqP+g

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:125743:Q4CKVQ3REpDlGAKKmIAA8AwLRqCVzzBGbw6IgSEkBs4JAkABJBGEJJjHjIOWKAHKcA4UII4QGIYAFimegiEAyjAGGCAXAakZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefefeffffffffff
Perceptual Hash:d5555555aaaaaaa8
Difference Hash:0000000000000000
Wavelet Hash:0e0e0e0e0e0e0e0e
Color Hash:#b487c5

Other Hashes

Crop Resistant:0000000000000000

Scan History

Scan history not available

Unable to load historical scan data