ScanMalware.com

Security Scan Report: wemoveidaho.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2874b9fd-1fe7-4203-8298-7777ee394e5aDomain and IP registration (RDAP)/api/v1/rdap/2874b9fd-1fe7-4203-8298-7777ee394e5aHow often this domain was scanned/api/v1/domain/stats/wemoveidaho.comScan history for this domain/api/v1/domain/history/wemoveidaho.com?limit=15
This website contacted 27 IPs in 1 country across 10 domains to perform 121 HTTP transactions. The main domain is wemoveidaho.com and was registered 2 years 11 months ago.

Submitted URL: https://wemoveidaho.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Legitimate moving company site compromised to serve IClickFix ClickFix/EtherHiding malware via obfuscated blockchain loader; IDS, kit roster, and threat intel confirm malicious activity. Avoid.

Risk Factors (5)
Compromised legitimate moving company website injecting ClickFix/EtherHiding malware
Analyst-vetted malicious kit (IClickFix, family iclickfix-sepolia-2026-10) detected in page HTML
Multiple critical Suricata IDS alerts for malware domains and EtherHiding exfiltration
Obfuscated JavaScript loads a remote stage from a blockchain smart contract
Hidden threat-intel flagged hosts (1rpc.io, gateway.tenderly.co, sepolia.gateway.tenderly.co) in obfuscated script
Domain age information unavailable

Details

Page Title

Boise Moving Company | Local & Long-Distance Movers

Scan Type

public

Domain Name Analysis

You're looking at domain 'wemoveidaho.com' on the commercial generic top-level domain (.com) while skipping any subdomain. The core label 'wemoveidaho' covers 11 characters containing 6 vowels alongside five consonants. Word splitting yields 3 words: we, move, idaho. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://wemoveidaho.com

Page Load Overview

12.30s
Total Load Time
6.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:8,738 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism84% confidence
Type: spa
Method: ml+structural

All Detected Categories

news media journalism
84%
blog personal website
83%
cryptocurrency blockchain
82%
social media network
80%
government public service
80%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17216.14.118.82United States
AS46433EBOUNDHOST.com
4172.217.208.95Google · CDNUnited States
AS15169Google LLC
4142.251.110.94Google · CDNUnited States
AS15169Google LLC
4142.251.13.102Google · CDNUnited States
AS15169Google LLC
4142.251.153.119Google · CDNUnited States
AS15169Google LLC
4142.251.151.4Google · CDNUnited States
AS15169Google LLC
4192.178.183.95Google · CDNUnited States
AS15169Google LLC
435.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
4188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.13.138Google · CDNUnited States
AS15169Google LLC
12127--

Detected Technologies9

WordPressv7.0.2
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
YouTube
20%
Slider Revolution
20%
Moment.js
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E1E30933A4443D3303232AD4F064678E71EAE329CA8245D8B3FDD2A85FD8DF6A526755

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:LRdjn6nDXX3F7jy8iZ8Jn8ISQKW8fJyfHb1qD6llZtD2RtwJARJdHEMhuM66saIv:LRdwDH3F7e8iZ8Jn8ISQKW8fJyfHb1qC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:154837:GAjJoKAEWcByIMBXBQrIIAMCWGJdiABiIjyAgxz9ARgWOAQwGIAkWAJsAgkoNGNSG4PPRVxekHAEmgBBGLKgpBpALQkemCUW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff0000000000ff
Perceptual Hash:caa0f59dbd27a540
Difference Hash:20a1e7e5b1b15111
Wavelet Hash:ffff7100001830ff
Color Hash:#a7c587

Other Hashes

Crop Resistant:20a1e7e5b1b15111,a5e7e7e130f06010

Scan History

Scan history not available

Unable to load historical scan data