Security Report: stepabovedigitalmarketing.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2b938460-98ae-4565-a35c-77f20579ba11 Domain and IP registration (RDAP)/api/v1/rdap/2b938460-98ae-4565-a35c-77f20579ba11How often this domain was scanned/api/v1/domain/stats/stepabovedigitalmarketing.com Scan history for this domain/api/v1/domain/history/stepabovedigitalmarketing.com?limit=15

This website contacted 34 IPs in 1 country across 25 domains to perform 147 HTTP transactions. The main domain is stepabovedigitalmarketing.com and was registered 5 years ago.

Submitted URL: https://stepabovedigitalmarketing.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Established marketing agency site that has been compromised: critical hunting rule and IDS confirm a ClearFake/Mordant EtherHiding loader and ClickFix Win+X terminal lure injecting malware into visitors. Avoid.

Risk Factors (5)

Compromised WordPress site injected with a blockchain-hosted malware loader (EtherHiding / ClearFake-style)

ClickFix Windows lure instructing visitors to paste commands into Terminal/PowerShell (ClickFix_WinX_Terminal_Lure)

PHP WordPress backdoor served as page text, giving an operator command execution (file writes, PHP eval, wp-config exfiltration)

Obfuscated JavaScript with eval() contacting RPC/dataseed infrastructure flagged in threat feeds

Site is a plausible business front (agency content, contact info) that masks the injected malicious script from casual review

Domain age information unavailable

Details

Page Title

Digital Marketing | Advertising Agency

Scan Type

public

Favicon Hash

MMH3: 761063543

MD5: 78a679966f933356e396096c392a9a27

Domain Name Analysis

The domain name 'stepabovedigitalmarketing.com' uses the commercial generic top-level domain (.com). The registrable portion 'stepabovedigitalmarketing' spans 25 characters holding ten vowels versus 15 consonants. Splitting it apart reveals four words: step, above, digital, marketing. The median word length lands at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.68s

Total Load Time

7.2 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:18,389 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical36% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

36%

news/blog

35%

corporate

35%

news media journalism

31%

blog personal website

30%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	162.144.15.174	Phoenix, Arizona, United States	AS31898Oracle Corporation
4	142.251.110.95Google · CDN	United States	AS15169Google LLC
4	142.251.20.97Google · CDN	United States	AS15169Google LLC
4	142.251.14.94Google · CDN	United States	AS15169Google LLC
4	142.251.13.95Google · CDN	United States	AS15169Google LLC
4	192.178.183.97Google · CDN	United States	AS15169Google LLC
4	142.251.110.94Google · CDN	United States	AS15169Google LLC
4	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
147	34	-	-