Security Scan Report: brotherhoodtattoo.ink

Site favicon
Submitted: Completed: publiccompleted
This website contacted 34 IPs in 3 countries across 16 domains to perform 162 HTTP transactions. The main domain is brotherhoodtattoo.ink and was registered 2 years 11 months ago.

Submitted URL: https://brotherhoodtattoo.ink

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Legitimate-looking established tattoo shop whose WordPress site appears compromised: primary domain flagged as malware and CRITICAL EtherHiding/ClearFake blockchain-based exfiltration alerts detected — do not browse.

Risk Factors (5)
Content-malware Indicators of Compromise on the PRIMARY domain (2 corroborating feeds)
CRITICAL IDS malware alert for EtherHiding exfiltration (x3)
Injected blockchain-RPC payload infrastructure (quiknode/drpc/polygon-rpc) typical of ClearFake
Malware-flagged third-party resource domains loaded by the page
WordPress site appearing compromised and serving injected malicious script
Domain age information unavailable

Details

Page Title

HomePage » BROTHERHOOD TATTOOs

Scan Type

public

Domain Name Analysis

Domain 'brotherhoodtattoo.ink' uses the .ink top-level domain while skipping any subdomain. Count 17 characters in 'brotherhoodtattoo' split between seven vowels and ten consonants. Breaking it apart gives 2 words: brotherhood, tattoo. The median word length lands at 8.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://brotherhoodtattoo.ink

Page Load Overview

10.19s
Total Load Time
4.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,931 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network97% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
97%
blog personal website
95%
finance banking
90%
healthcare medical
82%
news media journalism
81%

Detected Features

OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
30173.236.137.206Ashburn, Virginia, United States
AS26347New Dream Network, LLC
4192.178.183.95Google · CDNUnited States
AS15169Google LLC
4142.250.154.132Google · CDNUnited States
AS15169Google LLC
4104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
4195.20.115.67Budapest, Budapest, Hungary
AS56322ServerAstra Kft.
4142.251.14.100Google · CDNUnited States
AS15169Google LLC
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
4142.251.155.119Google · CDNUnited States
AS15169Google LLC
4178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
16234--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T107140832BA660C7A212F23DBD01BA78DA1C7D7CBC9405BF5F2F2506465B4C847A93A71

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:e1UVeFt0k84wk86cMdZLnPOnWkgOZUSn93s5S1MtxfKUXWqG8Oj57b43kTJbpbMR:eSwPYMOZbCOj5xqFZdb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:203730:AcgXIAwPzAxnqAKRuAJDRECUQTggJKgRHSUwwYLoiiGQr0zACuJRCTEAEYG4iYYHjABAARJfDQOAKRAAjogx6hgAACAFZlkA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0098105858ffcfcf
Perceptual Hash:984733e74830673f
Difference Hash:d46021b4b30d1919
Wavelet Hash:00b8105859ffcfcf
Color Hash:#99ac53

Other Hashes

Crop Resistant:d46021b4b30d1919

Scan History

Scan history not available

Unable to load historical scan data