Security Report: woraset-partners.co.th - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/67c55f8b-e554-46d5-bbec-703d636017b8 Domain and IP registration (RDAP)/api/v1/rdap/67c55f8b-e554-46d5-bbec-703d636017b8How often this domain was scanned/api/v1/domain/stats/woraset-partners.co.th Scan history for this domain/api/v1/domain/history/woraset-partners.co.th?limit=15

This website contacted 8 IPs in 3 countries across 11 domains to perform 47 HTTP transactions. The main domain is woraset-partners.co.th and was registered 3 years 7 months ago.

Submitted URL: https://woraset-partners.co.th

Effective URL:

https://www.woraset-partners.co.th/th/__trashed-5/

Redirected

AI Security Verdict

High Risk

Confidence: 93%

Risk Score

Legitimate Thai law-firm WordPress site appears compromised: an injected EtherHiding script pulls a ClickFix 'Human Verification' overlay from a 3-feed malicious host and tells Windows users to run Terminal commands.

Risk Factors (4)

Compromised WordPress page serving a ClickFix social-engineering overlay that instructs Windows users to open Terminal and run attacker-supplied commands

Blockchain-based (EtherHiding) loader that resolves the current payload host from a smart contract, obfuscated to hide it from static review

Multiple critical IDS malware/exfiltration alerts and a 3-feed corroborated malicious payload host

Single-source unverified 'iclickfix (malware)' reputation entries on the scanned domain itself

Domain age information unavailable

Details

Page Title

หน้าแรก | บริษัท วรเศรษฐ์ แอนด์ พาร์ทเนอร์ จำกัด

Scan Type

public

Favicon Hash

MMH3: 1198047028

MD5: 000bf649cc8f6bf27cfb04d1bcdcd3c7

Domain Name Analysis

The domain 'woraset-partners.co.th' uses the Thai country-code top-level domain (.co.th) without a subdomain. The core label 'woraset-partners' covers 16 characters holding 5 vowels versus 10 consonants, notching 1 hyphen. Tokenizing the label suggests 4 words: wor, a, set, partners. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.85s

Total Load Time

670 KB

Total Size

Language Analysis

Primary Language

🇹🇭Thai

Code: th

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:th

Text Length:1,241 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business34% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

34%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	103.13.31.68	Thailand	AS56309Siamdata Communication Co.,Ltd.
5	74.125.29.95Google · CDN	United States	AS15169Google LLC
5	151.101.129.229Fastly · CDN	United States	AS54113Fastly, Inc.
5	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
5	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
5	142.250.154.94Google · CDN	United States	AS15169Google LLC
47	8	-	-