Security Scan Report: chanjohnsonmusic.com

Site favicon
Submitted: Oct 14, 2026, 9:00:10 PMCompleted: Oct 14, 2026, 9:01:11 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate music-artist WordPress site compromised and serving a ClickFix/EtherHiding malware loader behind a fake 'Human Verification' overlay; treat as malicious and avoid interaction.

Risk Factors (5)
Compromised WordPress site serving an injected ClickFix malware kit
Fake 'Human Verification' overlay directing users to run Windows Terminal commands
EtherHiding loader resolving its payload address from a Polygon smart contract
Obfuscated script concealing known-attacker blockchain RPC hosts
Multiple CRITICAL network IDS malware/exploit-kit alerts on page load
Domain age information unavailable

Details

Page Title

R&B Artist & Producer | Chan Johnson

Scan Type

public

Domain Name Analysis

Domain 'chanjohnsonmusic.com' uses the commercial generic top-level domain (.com) with no subdomain. The core label 'chanjohnsonmusic' covers 16 characters with 5 vowels and eleven consonants. Word splitting yields 3 words: chan, johnson, music. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://chanjohnsonmusic.com

Page Load Overview

7.59s
Total Load Time
22.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:5,942 chars
Detector Agreement:80%

Website Classification

Primary Category

entertainment media72% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
72%
download file sharing
62%
education learning
57%
social media network
47%
blog personal website
45%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16174.138.176.150New York, New York, United States
AS19318Interserver, Inc
3104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.0.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.97Google · CDNUnited States
AS15169Google LLC
3104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.157.119Google · CDNUnited States
AS15169Google LLC
3104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
3142.250.154.95Google · CDNUnited States
AS15169Google LLC
335.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
8223--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18373097263E40237265AC2D96064B31A7AF1D117ED075B85B2FC12AF7FA5DE13823638

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:BCt5/pypSXAKaRA3AU8wA83OOgXLaq7IGGI9afXopbhUEyU6NRja:QkgXAK4A3AUfA8MLaq7IGGGafXopbaE3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:78035:A+gmQgmGgSmgDiFIxyRadEITGxAgIiBFCDpC6DJIIhEwMCoxIYIoiLQYEJsxYuSwBRILKEhpBgfgSQYQDANfYBUAEIxouqqQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data