ScanMalware.com

Security Scan Report: afriserve360.com

Site favicon
Submitted: Oct 9, 2026, 1:41:17 PMCompleted: Oct 9, 2026, 1:41:55 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised WordPress site injecting two analyst-vetted malicious loaders (ClearFake Polygon EtherHiding + ErrTraffic/Exvicy) and hiding threat-feed hosts in obfuscated JS. Do not visit; report.

Risk Factors (5)
Two CRITICAL roster-anchored YARA identifications of known phishing/malware injection kits (ClearFake, ErrTraffic/Exvicy)
EtherHiding loader reading a next-stage server list from a Polygon smart contract
Obfuscated inline JavaScript (base64/atob + XOR + new Function) hiding threat-feed hosts
Third-party resource (cloudflare-check.net) corroborated malicious by 3 independent threat feeds
Primary domain flagged as a malware loader; injected casino/gambling spam content on a business-services site indicates a compromised WordPress installation
Domain age information unavailable

Details

Page Title

Afriserve360 – We empower businesses to achieve operational excellence

Scan Type

public

Domain Name Analysis

Domain 'afriserve360.com' uses the commercial generic top-level domain (.com) with no subdomain. The core label 'afriserve360' covers 12 characters containing four vowels alongside 5 consonants; bonus characters include three digits. Breaking it apart gives four words: a, fri, serve, 360. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://afriserve360.com

Page Load Overview

2.70s
Total Load Time
2.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:18,705 chars
Detector Agreement:75%

Website Classification

Primary Category

documentation technical60% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
60%
technology software
39%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1084.16.254.2Germany
AS28753Leaseweb Deutschland GmbH
10142.251.13.95Google · CDNUnited States
AS15169Google LLC
10140.82.49.248Santa Clara, California, United States
AS20473The Constant Company, LLC
10142.251.14.94Google · CDNUnited States
AS15169Google LLC
404--

Detected Technologies8

WordPressv7.1.3
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
LiteSpeed
40%
HTTP/3
40%
WordPress Block Editor
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DDA35C7314C8203F276B53CAE112B6ACD5AF5476CF00D981B3F6506CEB85AB646B2379

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:rcUxxOypOc1QbNJOGe4eW+Ujc7cica2osoWOkQzLeRwsLePRvFXb:rcUxxnoc1QJJ8mOXjkQgwsLeP5Bb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:104199:gAAaTKAQIQ1wKEEFULLAYIInSxNlIMIXYKChJMIQJoElkuAFg2GANYYSSSXYpgkwQKoooRcChEEBJJgEAAIetFCCHIFEgQEE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0001010101010101
Perceptual Hash:aa55cc557355cc54
Difference Hash:0101010909010101
Wavelet Hash:030313030f1f0f0f
Color Hash:#99ac53

Other Hashes

Crop Resistant:0101010909010101

Scan History

Scan history not available

Unable to load historical scan data