Security Scan Report: pmixers.net

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 3 countries across 11 domains to perform 137 HTTP transactions. The main domain is pmixers.net and was registered 6 years ago.

Submitted URL: https://pmixers.net

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate concrete-mixer WordPress site compromised and injected with roster-confirmed ClickFix and ErrTraffic/Exvicy kits, EtherHiding exfiltration and casino SEO spam. Do not interact; report.

Risk Factors (5)
Injected ClickFix Win+X fake 'Human Verification' overlay kit (roster-anchored, CRITICAL)
Injected ErrTraffic/Exvicy WordPress loader with XOR+new Function obfuscation (roster-anchored, CRITICAL)
EtherHiding malware exfiltration IDS alert (CRITICAL)
Blockchain RPC connection consistent with EtherHiding C2
Large blocks of injected foreign-language gambling SEO spam unrelated to the site's stated business
Domain age information unavailable

Details

Page Title

Concrete Mixer Manufacturer China - Pmixers

Scan Type

public

Domain Name Analysis

The domain 'pmixers.net' uses the network infrastructure generic top-level domain (.net) without a subdomain. Count 7 characters in 'pmixers' with 2 vowels and 5 consonants. Segmentation suggests two words: p, mixers. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pmixers.net

Page Load Overview

16.56s
Total Load Time
3.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:20,835 chars
Detector Agreement:40%

Website Classification

Primary Category

documentation technical40% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
40%
corporate
35%
corporate business
31%
news/blog
30%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1745.76.183.50Singapore, Singapore
AS20473The Constant Company, LLC
15142.251.14.95Google · CDNUnited States
AS15169Google LLC
15192.178.183.97Google · CDNUnited States
AS15169Google LLC
15172.67.186.216Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
15178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
15142.251.14.94Google · CDNUnited States
AS15169Google LLC
15216.239.34.36Google · CDNUnited States
AS15169Google LLC
1379--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A632089EEE953270F31317CF37AF2A2A121490D72409C294F58C9EE16F0B78D5716EA6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:GXHNsGeTHQpD+da6+8QPUV7lrDyjFrxzGDiW9TBTvLQRX9GzRVDBpHW:GXX+/zV7SFZGl9TBfQZ9GzBZW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11765:cFKQ4EAGqJSqBCXucQRioBhQQQ0hEigcAokIYAICYBFcQYEQhgJhAUIFBJABFJQVkCKAzQOdXmC9gMERCRCJfQlCwMqAxEI5

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff81ffffffff
Perceptual Hash:bf2fc0c03f3fc0c0
Difference Hash:0000012301000000
Wavelet Hash:ffffff8100000000
Color Hash:#6640bf

Other Hashes

Crop Resistant:0000012301000000

Scan History

Scan history not available

Unable to load historical scan data