Security Scan Report: arusmrtech.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 3 countries across 10 domains to perform 68 HTTP transactions. The main domain is arusmrtech.com and was registered 11 years ago.

Submitted URL: https://arusmrtech.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate 11-year-old site compromised: injected ClickFix 'Windows key + X / Terminal' fake Cloudflare verification overlay, EtherHiding blockchain loader and gambling spam. Confirmed malicious; do not paste anything or interact.

Risk Factors (6)
Compromised WordPress site serving a ClickFix fake 'Human Verification' overlay
Blockchain-based (EtherHiding) loader resolving stage-2 payload from a Polygon smart contract
Brand impersonation of Cloudflare verification UI
Obfuscated scripts hiding threat-feed hosts (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co)
Injected gambling SEO spam unrelated to the site's stated business
Login form present on the compromised page (1 password field, 4 forms)
Domain age information unavailable

Details

Page Title

Home | ARUS MR TECH

Scan Type

public

Domain Name Analysis

You're looking at domain 'arusmrtech.com' on the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'arusmrtech' spans 10 characters containing 3 vowels alongside seven consonants. Word splitting yields four words: a, rus, mr, tech. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://arusmrtech.com

Page Load Overview

2.98s
Total Load Time
14.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,921 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical42% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
42%
corporate
35%
government public service
26%

Detected Features

Login Form
Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13118.139.177.34Singapore, Singapore
AS26496GoDaddy.com, LLC
5142.251.14.95Google · CDNUnited States
AS15169Google LLC
5192.178.183.95Google · CDNUnited States
AS15169Google LLC
5104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
523.207.210.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
535.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
5178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
5192.178.183.94Google · CDNUnited States
AS15169Google LLC
523.67.142.207Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
6812--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T138C31A63524A223B575B52C8A060B71FB1F1A211FF075E95F3F892DEEBD4CD0A923528

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:4nghAReA0A3fAqUhp2nrtQVJ2Ni3UvAQmMkjxyHs2/R:4JpYbhp2RQVJ2A3U4C

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:127689:UAweEMgIjSAkVMD9GAbaEgo2CGCEZBDxEAvAQI2oBQB4IARwIkHSo4HIEQAskgsvRO8g2GEAQKQwuSIQEZqBSKFe4pkMlCEY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00000000ffffcf
Perceptual Hash:b046b1c6e9bdc6b0
Difference Hash:f0e86e1683a1189a
Wavelet Hash:ff00000040ffffdf
Color Hash:#87c5a9

Scan History

Scan history not available

Unable to load historical scan data