ScanMalware.com

Security Scan Report: dailymoon.news

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6b931954-cf02-4b9f-818a-a391c16b3925Domain and IP registration (RDAP)/api/v1/rdap/6b931954-cf02-4b9f-818a-a391c16b3925How often this domain was scanned/api/v1/domain/stats/dailymoon.newsScan history for this domain/api/v1/domain/history/dailymoon.news?limit=15
This website contacted 11 IPs in 3 countries across 8 domains to perform 55 HTTP transactions. The main domain is dailymoon.news and was registered 4 years 8 months ago.

Submitted URL: https://dailymoon.news

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Likely compromised news site: it loads an exploit-kit script from interseq.at and triggers repeated CRITICAL EtherHiding malware alerts via blockchain RPC fetches. Avoid visiting; the page itself has no forms but serves malicious code.

Risk Factors (4)
Compromised/abused page loading exploit-kit script from interseq.at (multi-feed malicious, ClearFake/EtherHiding)
CRITICAL network IDS alerts for EtherHiding exfiltration (9 occurrences)
Blockchain RPC fetches used for payload retrieval (EtherHiding delivery pattern)
Domain-level malware flags on dailymoon.news (single-source, unverified)
Domain age information unavailable

Details

Page Title

The Daily Moon (Online version)

Scan Type

public

Domain Name Analysis

The domain 'dailymoon.news' uses the .news top-level domain. Its registrable label 'dailymoon' stretches across 9 characters holding four vowels versus 5 consonants. Breaking it apart gives 2 words: daily, moon. Median word length is 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dailymoon.news

Page Load Overview

2.94s
Total Load Time
936 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:6,720 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism42% confidence
Type: spa
Method: ml+structural

All Detected Categories

news media journalism
42%
government public service
30%
corporate business
29%
news/blog
20%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5116.202.25.134Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
5172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.13.95Google · CDNUnited States
AS15169Google LLC
5188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.250.154.94Google · CDNUnited States
AS15169Google LLC
5104.21.3.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5193.233.126.164Amsterdam, North Holland, Netherlands
AS209207Digital Hosting Provider LLC
5104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5172.67.130.228Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5511--

Detected Technologies12

WordPressv7.1.3
100%
MetaGenerator
100%
JQueryv3.7.1
100%
Bootstrapv7.1.3
100%
PHP
50%
MySQL
50%
Apache HTTP Serverv2
40%
sidr
20%
jQuery Migrate
20%
imagesLoaded
20%
Slick
20%
Magnific Popup
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1623562138B543B7BA29515D8C16D320616F5A813E4743AAC7FCF0DDBFB2A6C784B520A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:eRg5/FBha1s9DTzEYfoDhXKFl/rYLoRj4SB9SLMIrCFYcg:8g5dA6DTzbuKDrYLoR8SBULMnF/g

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1095238:CpuAyuAChsqkeASAEqYiAAMEIFACcGDiba0ER1UmEpg5BqCIlBkgAgZIYSCfEEkELA1KCKWLPBQnAZDBAYzRWLAgCi0KBAAm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffcfc3c7cfffff
Perceptual Hash:b131cece333199c9
Difference Hash:0000181c18100000
Wavelet Hash:3f3f0f03c0c0f0f0
Color Hash:#40acbf

Other Hashes

Crop Resistant:0000181c18100000

Scan History

Scan history not available

Unable to load historical scan data