ScanMalware.com

Security Scan Report: thematrixcore.net

Submitted: Oct 8, 2026, 9:37:06 PMCompleted: Oct 8, 2026, 9:37:44 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Compromised WordPress site injecting a critical IClickFix/EtherHiding loader (YARA + CRITICAL IDS alert + malware Indicators of Compromise on both the page domain and a loaded third-party host). Do not visit.

Risk Factors (5)
Critical YARA rule matching an analyst-vetted malicious kit (IClickFix EtherHiding loader)
CRITICAL network IDS malware alert (EtherHiding exfiltration)
Primary domain flagged as a malware loader in threat intelligence
Page loads/references a multi-feed-flagged malware domain (zvh3.com)
EtherHiding technique retrieves an encrypted stage from an Ethereum smart contract to evade takedown — strong malicious intent
Domain age information unavailable

Details

Page Title

The Matrix Core

Scan Type

public

Domain Name Analysis

The domain name 'thematrixcore.net' uses the network infrastructure generic top-level domain (.net) with no subdomain. Its registrable label 'thematrixcore' stretches across 13 characters containing 5 vowels alongside 8 consonants. Tokenizing the label suggests 3 words: the, matrix, core. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://thematrixcore.net

Page Load Overview

4.25s
Total Load Time
104 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:295 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media65% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
65%
technology software
59%
e-commerce shopping
52%
adult content
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
462.210.10.57Paris, Île-de-France, France
AS12876Scaleway SAS
2172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.72.64Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
83--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13873A6A157B048F17D7F833BAE44A2185227E912C9097BD5F0F3D294758CEA616E3B0B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:PW18RaecmRiBmgT0cTrnbO27kB5ypDz1nT85ZobXemlUVuXwamsmgf:u4aecmRiBmgT0cTrnbO27kB0wZobXemf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:79664:iQOhCMETAOMGWFIGAIKBAioLBYoBrmDkigITAQAARQw3DcCLjMhIZ4giyCg0UCDhCRJuGAAycTIWStOCA/APPbAkGABgAxZE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bccec6c6fe9e98ff
Perceptual Hash:dd310e0fc60f2763
Difference Hash:7010141400626000
Wavelet Hash:90c2c2c6fe9898f8
Color Hash:#86672d

Other Hashes

Crop Resistant:7010141400626000

Scan History

Scan history not available

Unable to load historical scan data