Security Report: xemphimpromax.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2e42dcef-b8e9-4647-973c-8a59f8fc785e Domain and IP registration (RDAP)/api/v1/rdap/2e42dcef-b8e9-4647-973c-8a59f8fc785eHow often this domain was scanned/api/v1/domain/stats/xemphimpromax.com Scan history for this domain/api/v1/domain/history/xemphimpromax.com?limit=15

This website contacted 9 IPs in 3 countries across 7 domains to perform 15 HTTP transactions. The main domain is xemphimpromax.com and was registered 10 months ago.

Submitted URL: https://xemphimpromax.com

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Site claims to be a free movie portal but serves an empty default WordPress install while loading flagged third-party resources and blockchain RPC nodes; a CRITICAL EtherHiding malware IDS alert and a primary-domain loader threat-intel match indicate malware/loader delivery.

Risk Factors (5)

Threat-intel match (loader/malware) on the primary domain of the scanned page

CRITICAL network IDS alert for EtherHiding malware exfiltration

Page-initiated connections to blockchain RPC endpoints combined with an Ethereum contract request — loader configuration retrieval via smart contract

Multiple page-loaded third-party resources with multi-feed malicious reputations (checkyoubrowse.codes, rpc-mainnet.matic.quiknode.pro, IP 178.16.52.101 ek clearfake)

High-risk content/purpose mismatch: advertises a movie streaming service while serving only an empty default WordPress install

Domain age information unavailable

Details

Page Title

Xem Phim ProMax | Xem Phim Miễn Phí Không Quảng Cáo -

Scan Type

public

Favicon Hash

MMH3: 82695474

MD5: 2b6b99c594430f6efdd3af7350569ea3

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'xemphimpromax.com' is registered without a subdomain. The second-level label 'xemphimpromax' is 13 characters long holding 4 vowels versus 9 consonants. It segments into 5 words: x, emp, him, pro, max. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

14.16s

Total Load Time

136 KB

Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese

Code: vi

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:vi

Text Length:472 chars

Detector Agreement:100%

Website Classification

Primary Category

adult content48% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

adult content

48%

entertainment media

44%

technology software

38%

corporate

35%

corporate business

29%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	160.187.147.83	Vietnam	AS151858INTERDIGI JOINT STOCK COMPANY
1	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
1	142.251.14.94Google · CDN	United States	AS15169Google LLC
1	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
15	9	-	-