Security Scan Report: s.yam.com

Redirected to:
https://suomengvalve.com/wp-content/themes/rshMicro365/officeonline/cg...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 19 IPs in 2 countries across 19 domains to perform 41 HTTP transactions. The main domain is yam.com and was registered 30 years ago.

Submitted URL: https://s.yam.com/NwxbO

Effective URL:
https://suomengvalve.com/wp-content/themes/rshMicro365/officeonline/cg...
Redirected

The Cisco Umbrella rank of the primary domain is #589,431 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

3
Risk Score

Shortener lands on a near-empty page hosted inside an unrelated site's WordPress theme directory and showing a foreign brand name (PRADA) — a hijacked-host doorway/cloaking pattern. No forms or malware, so avoid interaction.

Risk Factors (4)
Content served from a WordPress system path on an unrelated, non-WordPress-looking domain (hijacked hosting indicator)
Shortener redirect chain landing on an unrelated domain (yam.com -> suomengvalve.com)
Nearly empty cloaked page with a foreign brand name ('PRADA') in the visible OCR text
ML page-topic classifier flagged the visible text as 'phishing scam' (context only, not scored as evidence)
Safety Factors (5)
No credential, login or payment forms on the page (verified form counts: 0 forms, 0 password fields, 0 payment fields)
No JavaScript malware patterns or high-precision YARA hits
No cross-origin credential exfiltration or external JS hosts
No known malicious kit in the kit roster
No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no YARA / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 7 to 3
Domain age information unavailable

Details

Page Title

yamShare-縮網址服務other network

Scan Type

public

Domain Name Analysis

The domain name 's.yam.com' uses the commercial generic top-level domain (.com), featuring subdomain 's'. Its registrable label 'yam' stretches across 3 characters with 1 vowel and 2 consonants. Breaking it apart gives one word: yam. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://s.yam.com/NwxbO

Page Load Overview

2.57s
Total Load Time
858 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:36 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as zh

Website Classification

Primary Category

phishing scam65% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

phishing scam
65%
adult content
41%
real estate property
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
552.187.123.178Azure · CLOUDSingapore, Singapore
AS8075Microsoft Corporation
2142.251.14.155Google · CDNUnited States
AS15169Google LLC
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.110.97Google · CDNUnited States
AS15169Google LLC
2104.18.30.170Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.31.170Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.20.100Google · CDNUnited States
AS15169Google LLC
2142.251.127.155Google · CDNUnited States
AS15169Google LLC
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
4119--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15862D3BB6CE30056A913C175AFEB990DA7328007C146CCA0BEDD5A54DF04EAA2C8779D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:aLfMtT3dYYLAWIkIDzqrqJlgN019TRPMPFPPUKPSwp+7tU1yAyubgGatVn0i:JdY0Whtgi1kNPMKqwnEtubgFD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:15089:MgBhICBpCdigA3T8WACEUgBgGnbWgNUlRYhhQUBRLgAi7AhM2ANeSQAgtbSQgOMgIPEC1qMGGGQIYmRgVBKAQG/IeLEAQKEB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181818180000
Perceptual Hash:8ccc33333333cd33
Difference Hash:01b3b3b171313101
Wavelet Hash:01393d3d3d3d3d11
Color Hash:#afc587

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data