Security Scan Report: bestcoacharound.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 1 country across 3 domains to perform 80 HTTP transactions. The main domain is bestcoacharound.com and was registered 6 years ago.

Submitted URL: https://bestcoacharound.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Compromised WordPress site serving a ClearFake/Mordant backdoor: obfuscated script resolves its next stage via a BNB Chain contract (EtherHiding) and touches Vidar-malware hosts. Do not load or interact.

Risk Factors (5)
Critical-severity hunting-rule detection of a ClearFake/Mordant WordPress backdoor
EtherHiding: blockchain contract used to resolve next-stage payload
Heavily obfuscated inline script with hidden threat-feed hosts (Vidar malware, known attacker)
Content-malware threat-intel match on the primary domain
Placeholder/filler content inconsistent with the claimed coaching business, typical of a compromised or repurposed site
Domain age information unavailable

Details

Page Title

bestcoacharound.com – Life Coach

Scan Type

public

Domain Name Analysis

The domain name 'bestcoacharound.com' uses the commercial generic top-level domain (.com) and has no subdomain. Count 15 characters in 'bestcoacharound' containing 6 vowels alongside nine consonants. It segments into 3 words: best, coach, around. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bestcoacharound.com

Page Load Overview

3.78s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:11,639 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical36% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
36%
blog personal website
35%
news media journalism
34%
healthcare medical
29%
technology software
27%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8162.241.218.55Phoenix, Arizona, United States
AS31898Oracle Corporation
8142.251.14.95Google · CDNUnited States
AS15169Google LLC
8142.251.14.94Google · CDNUnited States
AS15169Google LLC
8104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
852.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
83.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
815.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
8172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
815.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
8142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
8010--

Detected Technologies15

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E7543C717A45193A212B43BFF08B7608509A9BB3DA1F91E1F1BE812899F5F81317361E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:vQbkFC2/Ed1CV5vvpwWVHefPVedq+k4V+3e9J32h3X9ZxCfWHfRSdM+dkoyxGc3l:vQR2/fV5vx6Mdw4V+tv9gn8OlO3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:297158:Iq6cDVAWjdAmFkEBIoDUAeAiKwBApAMyg5gTEAgyYlidGYbGUeAkYHF0kKgClIXSCgAYLSBMXEJYqY+ApFuoTW3CAEgBqAIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0103030101030101
Perceptual Hash:aa75a9945a4aa75a
Difference Hash:2317470b95170b0b
Wavelet Hash:01ef03017fff038b
Color Hash:07000000000

Other Hashes

Crop Resistant:2317470b95170b0b

Scan History

Scan history not available

Unable to load historical scan data