Security Scan Report: cakedame.com

Site favicon
Submitted: Sep 17, 2026, 11:47:36 AMCompleted: Sep 17, 2026, 11:48:14 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Legitimate long-standing bakery page appears compromised: a CRITICAL EtherHiding malware signature and an IoC-flagged script (xaz2.com) are loaded via a blockchain RPC endpoint. Do not interact until cleaned.

Risk Factors
Site appears compromised: malicious third-party script (xaz2.com) loaded on an otherwise legitimate bakery page
EtherHiding exfiltration detected by Suricata CRITICAL signature
Blockchain RPC endpoint used for payload/config retrieval
Threat-intelligence hit on the primary domain (unknown RAT, unverified single source)
Domain age information unavailable

Details

Page Title

Cake Dame | Specialty Cakes & Confections

Scan Type

public

Domain Name Analysis

The domain 'cakedame.com' uses the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'cakedame' spans 8 characters split between four vowels and 4 consonants. Breaking it apart gives two words: cake, dame. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cakedame.com

Page Load Overview

11.15s
Total Load Time
12.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:868 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network66% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
66%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1545.63.87.235Santa Clara, California, United States
AS20473The Constant Company, LLC
5204.155.145.174United States
AS40824Webzilla Inc.
5142.251.157.119Google · CDNUnited States
AS15169Google LLC
5104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.156.119Google · CDNUnited States
AS15169Google LLC
5188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.13.94Google · CDNUnited States
AS15169Google LLC
5142.251.110.94Google · CDNUnited States
AS15169Google LLC
5142.251.155.119Google · CDNUnited States
AS15169Google LLC
5142.251.152.119Google · CDNUnited States
AS15169Google LLC
6511--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C314960F9B7632B071538FE5FECAA3E4C26CC2536A9208DA7D6195098B832DF457311E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:M9i5Q62I/xE6x4g5bn/+pZdyp6/r5illHsImIuRNjcXscJGcz74kQ9wAQrdczEBC:qiC7Zyp6roF4kQ9wRrdczEY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:204784:wUURjJBHAgoFBzgIFAYRiQS6ROAEEIAA4IGabA8vSgakGqAHlcpEIVFAICVU8ioFMo4gQGAUI4OPIhzxyQQUCARyEigM4BIJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000000ffffff00
Perceptual Hash:c55542d047b18fb7
Difference Hash:c484080080230a61
Wavelet Hash:78000000ffffff39
Color Hash:#d22da9

Other Hashes

Crop Resistant:c484080080230a61

Scan History

Scan history not available

Unable to load historical scan data