Security Scan Report: fetishexpo.net

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 3 countries across 6 domains to perform 16 HTTP transactions. The main domain is fetishexpo.net and was registered 18 years ago.

Submitted URL: https://fetishexpo.net

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Likely compromised adult review site serving an injected ClickFix/EtherHiding blockchain loader; kit roster, critical IDS alerts and obfuscated script analysis confirm malware delivery despite legitimate-looking content.

Risk Factors (6)
Known malicious ClickFix/EtherHiding kit injected into the page (analyst-vetted, CRITICAL)
EtherHiding loader resolving next-stage payload from a Polygon smart contract
Multiple CRITICAL IDS malware/exploit-kit alerts during page load
Heavily obfuscated JavaScript concealing blockchain RPC infrastructure
Primary domain flagged as malware in threat intelligence (single-source)
Likely compromised WordPress-style review site serving injected malicious script
Domain age information unavailable

Details

Page Title

The Fetish Expo - Fetish paysites honest reviews

Scan Type

public

Domain Name Analysis

Within the network infrastructure generic top-level domain (.net), 'fetishexpo.net' is registered and has no subdomain. Its registrable label 'fetishexpo' stretches across 10 characters split between 4 vowels and 6 consonants. Segmentation suggests two words: fetish, expo. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fetishexpo.net

Page Load Overview

2.56s
Total Load Time
394 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:41,264 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media82% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
82%
adult content
67%
corporate
35%
forum
25%
news/blog
20%

Detected Features

Search
Articles
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6208.74.149.237United States
AS27589MOJOHOST
293.93.51.189Luxembourg
AS34655JWE S.a r.l.
2152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
293.93.51.200Luxembourg
AS34655JWE S.a r.l.
235.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
22.27.5.107United States
AS202226Great Flower
166--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19C642A318369647B43366ECBA070750F3AED11B8FA263180F6F747BDD6A4DA53224A1D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:+EMOnNwsrQLTrz3AOv0Z/RRxQyWTdiVZZ2Wb:0dlBSw+2Wb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:331874:KBwGAiWSv8iWhiCg6QSA0A8mE72BQIkwyBClA6QZOCgYSQxkgAAPABoB0RMIGEpAAGMAZIEEjFA1BARKpDyRJA1JUNMJAKl9

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff18180018181818
Perceptual Hash:ccb1e6b2e6b39888
Difference Hash:0cb0b22032703222
Wavelet Hash:ff181c383c3c3c3c
Color Hash:#53a0ac

Other Hashes

Crop Resistant:0cb0b22032703222

Scan History

Scan history not available

Unable to load historical scan data