Security Scan Report: drumfluence.com

Site favicon
Submitted: Sep 19, 2026, 9:47:27 AMCompleted: Sep 19, 2026, 9:48:02 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Legitimate-looking 6-year-old drumming blog, but compromised/degraded: primary-domain stealer Indicators of Compromise, an external iclickfix malware host, and a CRITICAL EtherHiding exfiltration IDS alert with Ethereum-RPC traffic.

Risk Factors (5)
Content-malware Indicators of Compromise match on the primary domain (stealer)
External malicious resource loaded: xaz2.com (iclickfix, 2 corroborating feeds)
CRITICAL IDS alert for EtherHiding exfiltration
Ethereum RPC endpoint (0xrpc.io) contacted, consistent with EtherHiding C2
Inline scripts use crypto/wallet-related APIs
Domain age information unavailable

Details

Page Title

NEW HOME 2026 - Drumfluence

Scan Type

public

Domain Name Analysis

You're looking at domain 'drumfluence.com' on the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'drumfluence' spans 11 characters split between four vowels and seven consonants. Breaking it apart gives 4 words: drum, flu, en, ce. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://drumfluence.com

Page Load Overview

6.62s
Total Load Time
4.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:65,918 chars
Detector Agreement:50%

Website Classification

Primary Category

education learning72% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
72%
entertainment media
58%
news/blog
35%
corporate
35%
documentation technical
34%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13194.1.147.97Manchester, England, United Kingdom
AS210250K Media Tech Ltd.
4142.251.127.155Google · CDNUnited States
AS15169Google LLC
4194.1.147.25Manchester, England, United Kingdom
AS210250K Media Tech Ltd.
4146.19.24.104Poland
AS201814MEVSPACE sp. z o.o.
4188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
423.222.80.4Akamai · CDNHamburg, Free and Hanseatic City of Hamburg, Germany
AS16625Akamai Technologies, Inc.
4142.251.127.154Google · CDNUnited States
AS15169Google LLC
4142.251.110.113Google · CDNUnited States
AS15169Google LLC
4142.251.110.100Google · CDNUnited States
AS15169Google LLC
4142.251.110.101Google · CDNUnited States
AS15169Google LLC
8519--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FA23A533E24444563F1F8B6DE695F22CE198A624DA066BF3B0F9316C45886F710F7A1E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:+9i5Q62I/xE6x4g5bn/Rg4Xxq1uWycaZdypaiQxAe:siCd4XwyPypq

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:45779:KF04AALoKaAIEWAKHQACkIGTYBWSTBTQgBJNdZBIU1gAIWgzqozFkFwNAh1MBCCEo5FBFSADxNC6UAQAwINLkAKBFHAARCAC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff902000000000
Perceptual Hash:eeccbca4a181b8bc
Difference Hash:266335c143454d31
Wavelet Hash:fffffff9c0000000
Color Hash:#d2797e

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data