Security Scan Report: ai4wm.com

Submitted: Completed: publiccompleted
This website contacted 23 IPs in 3 countries across 19 domains to perform 104 HTTP transactions. The main domain is ai4wm.com and was registered 3 years 3 months ago.

Submitted URL: https://ai4wm.com

AI Security Verdict

High Risk

Confidence: 88%

9
Risk Score

Compromised WordPress blog injecting EtherHiding malware: obfuscated script pulls its next stage from a blockchain contract, triggering 20 critical ET MALWARE exfiltration alerts. Do not visit.

Risk Factors (5)
Critical IDS malware alerts indicating EtherHiding command-and-control/exfiltration traffic
Obfuscated JavaScript that resolves its next stage from a blockchain smart contract - a known malware loader evasion technique
Content-malware threat-intel match on the scanned primary domain (single-source, unverified)
Blockchain RPC endpoints embedded in obfuscated script, including one flagged for Vidar malware
Six chained cross-domain redirects in the navigation path
Domain age information unavailable

Details

Page Title

ai4wm.com

Scan Type

public

Domain Name Analysis

The domain 'ai4wm.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Count 5 characters in 'ai4wm' split between two vowels and two consonants, along with one digit. Breaking it apart gives 4 words: a, i, 4, wm. Median word length is one character. No strong language cues emerged from the frequency lists.

Screenshot

ai4wm.com Performing security verification This website uses a security service to protect against malicious bots. This page is displayed while the website verifies you are not a bot. Verify you ar...

Page Load Overview

8.77s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:12,750 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical45% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
45%
news media journalism
40%
technology software
37%
blog personal website
34%
healthcare medical
34%

Detected Features

Search
Articles
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16211.55.92.159Gwanak-gu, Seoul, South Korea
AS4766Korea Telecom
4142.251.20.95Google · CDNUnited States
AS15169Google LLC
4142.251.14.155Google · CDNUnited States
AS15169Google LLC
4192.178.183.94Google · CDNUnited States
AS15169Google LLC
435.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
415.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
43.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
4172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10423--

Detected Technologies11

WordPressv7.1.3
100%
JQueryv3.7.1
100%
Bootstrapv2.3.12
100%
PHPv8.3.24
40%
Nginxv1.29.1
40%
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T193457C76344F2038015371AA748B9818F459466795E3E0F2F28D8A24FBFE7D8A27375E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:ZV0K2Q1myBT++DwSmal2/0JLTzObqxoFcQSvthLQCce9/PzXWMdyB70y253oOdXT:T+aM8JcItlQG/LXWMUB752ZN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1244671:skgAAECpAB4hdZMSAShIhXCBGVgBRQBRGAqHFQjGUhEldqSqgMKViRggKJoUCIEBbSSgQmNiEGQQAACASgk0QCguIQJwkAjh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc3c3dfffffffe7
Perceptual Hash:b03826cec7cf6361
Difference Hash:309e9e102000100c
Wavelet Hash:efcfc3cf0c0c0400
Color Hash:N/A

Other Hashes

Crop Resistant:309e9e102000100c

Scan History

Scan history not available

Unable to load historical scan data