Security Scan Report: bettinahuang.com

Submitted: Completed: publiccompleted
This website contacted 11 IPs in 1 country across 8 domains to perform 40 HTTP transactions. The main domain is bettinahuang.com and was registered 1 month ago.

Submitted URL: https://bettinahuang.com

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Compromised WordPress spam blog that loads ClearFake exploit-kit hosts and triggers critical EtherHiding malware-exfiltration IDS alerts; primary domain is flagged as malware. Do not browse.

Risk Factors (5)
Critical IDS malware alerts (EtherHiding exfiltration) on the page
Exploit-kit (ClearFake) domains interseq.at and javascript.skin loaded and contacted via sendBeacon
Primary domain flagged as malware (iclickfix) in threat intelligence
Blockchain RPC domains contacted from page scripts (EtherHiding C2 pattern)
SEO-spam / hijacked WordPress content with gambling and slot-machine keyword stuffing
Domain age information unavailable

Details

Page Title

Bettinahuang

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'bettinahuang.com' is registered while skipping any subdomain. The second-level label 'bettinahuang' is 12 characters long holding five vowels versus 7 consonants. Segmentation suggests two words: bettina, huang. Expect six characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bettinahuang.com

Page Load Overview

3.02s
Total Load Time
731 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:7,257 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media74% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
74%
education learning
55%
news media journalism
51%
adult content
46%
government public service
39%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10104.21.84.23Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.185.7Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.20.94Google · CDNUnited States
AS15169Google LLC
3142.250.154.94Google · CDNUnited States
AS15169Google LLC
3142.251.20.95Google · CDNUnited States
AS15169Google LLC
3172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.21.85.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
335.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3172.67.205.149Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4011--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17514B7D3485924985F2EA7E2D1C1ECB8FE4391ABD68AD57076BCF2783B419963201D0E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:nJXLQV3XOU9YpAs2/TKvX7bPtJI26tHmX52SNpy:J8V3XOU9YU26tHmX5vNpy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:200285:LGoUBIWThyBQAaCuQAgpFMBARAgASMdhr1vHAlgqCTZoRBWBcIWzgj6mEpwmYAQRCCSDLyhQGkkUKAgCJ0UBoBJCXYGQQCgk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffcfc3c7cfffff
Perceptual Hash:b131cecc333399c9
Difference Hash:0000181c18100000
Wavelet Hash:3f3f0f03c0c0f0f0
Color Hash:#4fbf40

Other Hashes

Crop Resistant:0000181c18100000

Scan History

Scan history not available

Unable to load historical scan data