ScanMalware.com

Security Scan Report: openad.io

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/40aa2fab-56e1-49e1-8adf-4c15155e65f6Domain and IP registration (RDAP)/api/v1/rdap/40aa2fab-56e1-49e1-8adf-4c15155e65f6How often this domain was scanned/api/v1/domain/stats/openad.ioScan history for this domain/api/v1/domain/history/openad.io?limit=15
This website contacted 11 IPs in 1 country across 4 domains to perform 68 HTTP transactions. The main domain is openad.io and was registered 2 years 12 months ago.

Submitted URL: https://openad.io

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Multi-source threat intel flags openad.io and its URL as malware, and page scripts open eight BSC testnet RPC connections unrelated to its claimed AI-writing purpose. No forms or credential capture observed. Treat as high risk.

Risk Factors (3)
Multi-source malware indicator of compromise on the primary domain and root URL
Unexplained blockchain RPC connections (BSC testnets) from a page presenting itself as an AI writing tool
Template/placeholder copy ('Simulated.ai', 'Trusted by 500+ Publishers.', 2023 copyright) with dead Sign In/Sign Up links (#) despite advertising a login area
Domain age information unavailable

Details

Page Title

Openad

Scan Type

public

Domain Name Analysis

Within the British Indian Ocean Territory country-code top-level domain (.io), 'openad.io' is registered. Its registrable label 'openad' stretches across 6 characters holding 3 vowels versus three consonants. Word splitting yields 2 words: open, ad. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://openad.io

Page Load Overview

3.20s
Total Load Time
872 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,231 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software80% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
80%
government public service
66%
news media journalism
64%
documentation technical
61%
social media network
55%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8162.241.218.220Phoenix, Arizona, United States
AS31898Oracle Corporation
6142.251.20.95Google · CDNUnited States
AS15169Google LLC
6192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
6172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
615.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
6142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
63.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
615.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
652.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
6172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6811--

Detected Technologies7

WordPressv7.0.7
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
Bluehost
40%
UIKit
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D8F3E66079871C2A212F03CF901B261C60C6DFF5EA23E5E5B2FE412817F9DA13AE7565

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:z+RceeksF/LeqEFsmIbG1daUpAGCCBV7nl2wqZ1iUW:beKbm0UZ/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:170991:VwZodIhEERaBLSECIB4gSGBCCVIBAVk4UA2JCJthQnACjL8AYQIK4OLExIUQKwDihT5jbSRgEHIsEEgAySAKBlkClEQ2QNzA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:08ffc3e7e1f0fcdc
Perceptual Hash:e2a55a4f035e6c74
Difference Hash:3b0f96cf8f216939
Wavelet Hash:00ffc3e3c0e0fc9c
Color Hash:#865c2d

Other Hashes

Crop Resistant:3b0f96cf8f216939,0000000032323000

Scan History

Scan history not available

Unable to load historical scan data