Security Scan Report: rightwinmedias.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 5 countries across 13 domains to perform 57 HTTP transactions. The main domain is rightwinmedias.com and was registered 8 years ago.

Submitted URL: https://rightwinmedias.com

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Legitimate-looking Salem media agency page, but CRITICAL EtherHiding malware IDS alerts plus blockchain seed-node traffic and malware-flagged domain/resource indicators point to a compromised site serving malware. Do not interact.

Risk Factors (5)
CRITICAL IDS malware alert consistent with EtherHiding (blockchain-hosted payload/C2 retrieval)
Primary domain flagged as content malware ('iclickfix') in threat intelligence
Loaded third-party blockchain seed node flagged as 'vidar' malware
Off-purpose blockchain/JSON-RPC requests from a business-marketing page
Spamhaus DROP-listed inbound traffic alert
Domain age information unavailable

Details

Page Title

Right Win Medias | Digital , Media Talent, Podcasts & Digital Tools

Scan Type

public

Domain Name Analysis

The domain name 'rightwinmedias.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'rightwinmedias' is 14 characters long with 5 vowels and 9 consonants. Word splitting yields 3 words: right, win, medias. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

@ Transforming Businesses in Salem & Beyond @into.rwm@gmall.com 7 +9198427 16692 Right Win Medias GZ AlStrategy SpotLight Podcast DigitalTools_-_KadaiOnline _Platforms MEDIA THAT WINS. v (-¥ 1swe...

Page Load Overview

0.86s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:9,364 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network78% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
78%
corporate business
39%
corporate
35%
technology software
32%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1292.113.23.232Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
392.113.16.66Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
3192.178.183.95Google · CDNUnited States
AS15169Google LLC
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
392.113.23.203Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
3104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3190.115.18.105United Arab Emirates
AS59692IQWeb FZ-LLC
3142.250.154.97Google · CDNUnited States
AS15169Google LLC
352.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5716--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T115E34D72E161203B652B86D7A29FF35D71709007D8034AB5BAEC22D84BC9FFD11266AD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:uQhMBzurcTpTycqXDlcIbMinMNVS252Ij:9mCcTpTycWJk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:147897:qhMFK2BUMUwUSgWVIACnOLBRMTIoABRMDoSHSOCeKViOpBhQAxRoiggIBQKI4YYQYgIAIkQygNoniNao6ECYIgUKAkMgTtMA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:66007d6c2c612181
Perceptual Hash:c3c43c38b3c3c78e
Difference Hash:d4c5c1c9c9cdc159
Wavelet Hash:67817d7d3d6101e1
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data