Security Scan Report: rentbeachbox.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 3 countries across 11 domains to perform 135 HTTP transactions. The main domain is rentbeachbox.com and was registered 4 years 9 months ago.

Submitted URL: https://rentbeachbox.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Compromised WordPress site running the ErrTraffic/Exvicy loader with EtherHiding blockchain-based payload retrieval, confirmed by hunting rule kit roster and six CRITICAL malware IDS alerts; page content is hijacked into casino SEO spam.

Risk Factors (6)
Known malicious kit ErrTraffic/Exvicy WordPress loader injected into the page
EtherHiding malware distribution: next-stage payload address fetched from a blockchain smart contract
Multiple CRITICAL IDS malware and exploit-kit alerts
Obfuscated inline script conceals multiple threat-feed hostnames
Compromised site repurposed for casino/betting SEO spam in several languages
Primary domain flagged as a malware loader
Domain age information unavailable

Details

Page Title

About Us - Rent BeachBox

Scan Type

public

Domain Name Analysis

Domain 'rentbeachbox.com' uses the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'rentbeachbox' spans 12 characters containing four vowels alongside eight consonants. Tokenizing the label suggests three words: rent, beach, box. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rentbeachbox.com

Page Load Overview

17.95s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:28,547 chars
Detector Agreement:60%

Website Classification

Primary Category

technology software98% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
98%
gambling betting
97%
finance banking
95%
blog personal website
90%
entertainment media
88%

Detected Features

Search
Articles
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1667.205.3.76Ashburn, Virginia, United States
AS26347New Dream Network, LLC
7192.178.183.95Google · CDNUnited States
AS15169Google LLC
7104.18.4.24Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.250.154.94Google · CDNUnited States
AS15169Google LLC
713.35.58.113Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
731.77.16.64Amsterdam, North Holland, Netherlands
7104.18.28.70Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.14.95Google · CDNUnited States
AS15169Google LLC
7104.18.5.24Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13518--

Detected Technologies14

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F9446A6B6775307832078B86F9C1732CA65DC153E6024DE5F8B696189FC3AE7027276C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Sd3QlUD4k3wPNRCkack/U99xcgk6NnKyyzHtW9YS//g1V0aY13j2s0nJ90fcxG:ID4kiNRCkZAwfKLSzfcxG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:278127:BBKEDBUCluKQECCTyqyaEoACQYQRAx+Q4giMQCqECJkoS4IBjAAXICA0CLSAwSGgGbLfFFIwxAQgQRggRC3UICFApJUYFCUA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc7c3c3fffffff7
Perceptual Hash:b13193c7c6cccccc
Difference Hash:1818163600000008
Wavelet Hash:ffc7c3c33030f900
Color Hash:#aed22d

Other Hashes

Crop Resistant:1818163600000008

Scan History

Scan history not available

Unable to load historical scan data