ScanMalware.com

Security Scan Report: fermentfield.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3e98329d-86c4-4a99-9db8-4aab8d17e062Domain and IP registration (RDAP)/api/v1/rdap/3e98329d-86c4-4a99-9db8-4aab8d17e062How often this domain was scanned/api/v1/domain/stats/fermentfield.comScan history for this domain/api/v1/domain/history/fermentfield.com?limit=15
This website contacted 8 IPs in 4 countries across 10 domains to perform 61 HTTP transactions. The main domain is fermentfield.com and was registered 5 years ago.

Submitted URL: https://fermentfield.com

AI Security Verdict

Confirmed Scam

Confidence: 94%

9
Risk Score

Compromised fermentation blog injecting the ClearFake EtherHiding loader: analyst-vetted kit match, CRITICAL EtherHiding IDS alert, and three malicious external domains. Do not visit.

Risk Factors (6)
ClearFake blockchain-contract loader injected into the page (EtherHiding)
hunting-rule match for ClearFake_Polygon_Contract_Loader in HTML body
CRITICAL network alert for EtherHiding exfiltration / network trojan
Page loads three independently corroborated malicious external domains
Primary domain reported as a malware loader
Hidden injected spam content (online casino promotions in many languages) unrelated to the apparent fermentation blog
Domain age information unavailable

Details

Page Title

Welcome to Ferment Field - 発酵畑 Ferment Field Welcome to Ferment Field

Scan Type

public

Domain Name Analysis

The domain 'fermentfield.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'fermentfield' stretches across 12 characters split between 4 vowels and eight consonants. Splitting it apart reveals two words: ferment, field. Median word length comes out to six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fermentfield.com

Page Load Overview

10.38s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:7,012 chars
Detector Agreement:75%

Website Classification

Primary Category

entertainment media90% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
90%
gambling betting
88%
education learning
78%
technology software
66%
government public service
65%

Detected Features

Articles
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12150.95.219.226Japan
AS7506GMO Internet, Inc.
7192.0.77.37San Francisco, California, United States
AS2635Automattic, Inc
7192.178.183.95Google · CDNUnited States
AS15169Google LLC
7192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
7142.251.20.94Google · CDNUnited States
AS15169Google LLC
7104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
794.23.162.163Saarbrücken, Saarland, Germany
AS16276OVH SAS
754.38.220.85France
AS16276OVH SAS
618--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T147F32BF728615E2E5A6B8AC5749D7B6CA174E103CB899C59F5D82A0C47C0DE823B331E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:cvjETN2UA36A+AXfAlAaLNcnx8SuSgRfHgfK9w32HZsWEGxA6XA9JQhXLh4RDK2H:u/vz4O3nx8SHN93vMLED

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:159845:ArqsWJRsQgQKhwgOwnQBMMAtAEARHRAogBADUBJPkLSBZggVEB0GTEPiQCEaFilEKqpRB2ghZgB82Rsg2RAIBCgxPBV7AmCA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffc38183c3c383
Perceptual Hash:b993c687396833c6
Difference Hash:0e000b1b1b1b3737
Wavelet Hash:ffffc3818183c181
Color Hash:#87c59d

Other Hashes

Crop Resistant:0e000b1b1b1b3737,8191301818198899,8ca8a9a8acacacc9,909280c0c08090c0,9c1b9b9b8aa3a333

Scan History

Scan history not available

Unable to load historical scan data