ScanMalware.com

Security Scan Report: foreverchanges.pro

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/79f53be5-5298-4c0f-b476-5e491a384895Domain and IP registration (RDAP)/api/v1/rdap/79f53be5-5298-4c0f-b476-5e491a384895How often this domain was scanned/api/v1/domain/stats/foreverchanges.proScan history for this domain/api/v1/domain/history/foreverchanges.pro?limit=15
This website contacted 277 IPs in 11 countries across 182 domains to perform 1031 HTTP transactions. The main domain is foreverchanges.pro and was registered 2 months ago.

Submitted URL: https://foreverchanges.pro/server-status

AI Security Verdict

Low Risk

Confidence: 72%

3
Risk Score

Fan-run WoW: Forever status site with substantial original content, no forms and no threat-intel, hunting rule or Safe Browsing hits. Young unranked domain and an ad-heavy redirect chain warrant only mild caution.

Risk Factors (2)
Heavy redirect chain (100 hops, 75 cross-domain) through advertising/analytics sync domains (1rx.io, scalibur.io, intentiq.com, openx.net, amazon-adsystem, yahoo analytics) — typical of ad-monetized pages but adds noise and third-party exposure
Blizzard/WoW branding is referenced throughout the content and quoted from official forums; the site does not claim to be Blizzard but could be mistaken for an official source
Safety Factors (5)
Self-branding detected: title, Open Graph site name and domain all align on 'ForeverChanges'
No credential, login or payment forms anywhere in the captured DOM
No Indicators of Compromise, no hunting rule malware, no known phishing kit
No cross-origin form submissions and no credential exfiltration detected
Substantial original editorial content (patch notes, login-error guides, maintenance timeline) consistent with a genuine community resource
Domain age information unavailable

Details

Page Title

Is WoW Forever down? Server status, maintenance and BLZ51901016

Scan Type

public

Domain Name Analysis

Domain 'foreverchanges.pro' uses the .pro top-level domain while skipping any subdomain. Its registrable label 'foreverchanges' stretches across 14 characters containing 5 vowels alongside nine consonants. Segmentation suggests two words: forever, changes. Average segment length settles at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

ONLINE NOW FOREVERCHANGES CO BERETA OS fee ) 3,292 Search 1)) © Signin pees — @ UPDATED BUILD 1.60.1.70790 — Changes” Patchnotes Talents” Builds Spells” Legacy Professions © Races’ Dungeons items” Qu...

Page Load Overview

11.02s
Total Load Time
12.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:17,504 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software72% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
72%
entertainment media
64%
adult content
64%
documentation technical
60%
cryptocurrency blockchain
58%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
203104.26.15.219Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.69.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.3.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
335.244.144.25Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3113.30.188.79Amsterdam, North Holland, Netherlands
AS41436Kamatera Inc
3142.251.13.156Google · CDNUnited States
AS15169Google LLC
3143.204.173.87Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
318.245.31.65Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3172.66.166.119Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1031277--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17064F93A6001D93FB83F3C99553EBE3E655A546FC581CE70A1ACDE1406818B93EA7DC8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:4zWMeXE6eE9MzrR/EW3UslSsOESeS/EUe4Ke3OEVe8+Z+GQ7bEANEfZKlbzISen6:4zbW9qCM6AE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:313039:CdCqYIhsQiIkEQGqAAB7BUAkpIhWtcFNSAqPBIoAguXIiDCggVDAAitVKYBgSAoBAEWIHEYAKgqgAcEAi5BgSKASdEAAg46A

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:786f7f7f00201010
Perceptual Hash:8383dc744ccdc9cb
Difference Hash:d0cccbc2cdc72333
Wavelet Hash:7c7f7f7f20601018
Color Hash:N/A

Other Hashes

Crop Resistant:d0cccbc2cdc72333

Scan History

Scan history not available

Unable to load historical scan data