Security Scan Report: robotretrofitters.com

Submitted: Oct 8, 2026, 12:23:11 PMCompleted: Oct 8, 2026, 12:24:04 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Compromised WordPress site: injected ClearFake/Polygon EtherHiding malware loader (CRITICAL YARA + vetted kit roster) and 9 CRITICAL IDS exploit-kit CnC alerts, plus hijacked gambling SEO-spam content. No credential forms, but it serves malware.

Risk Factors (6)
ClearFake/EtherHiding malware loader injected into the page (roster-anchored CRITICAL phishing kit)
CRITICAL YARA match ClearFake_Polygon_Contract_Loader
9 CRITICAL IDS exploit-kit alerts (TA2726 fake WordPress plugin CnC, TA569 Gholoader TDS)
Obfuscated JavaScript concealing blockchain RPC and threat-feed hosts
Multi-source malicious-host match on third-party resource rehearsal-b.com contacted via fetch
Site content hijacked for multi-language illegal gambling/betting SEO spam
Domain age information unavailable

Details

Page Title

Robot Retrofitters – Elevating Machines, Enhancing Potential

Scan Type

public

Domain Name Analysis

You're looking at domain 'robotretrofitters.com' on the commercial generic top-level domain (.com) with no subdomain. The core label 'robotretrofitters' covers 17 characters containing 6 vowels alongside 11 consonants. Tokenizing the label suggests three words: robot, retro, fitters. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://robotretrofitters.com

Page Load Overview

1.85s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,160 chars
Detector Agreement:75%

Website Classification

Primary Category

gambling betting98% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
98%
documentation technical
64%
technology software
62%
social media network
54%
education learning
52%

Detected Features

Search
Articles
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7141.193.213.10Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
4142.251.20.97Google · CDNUnited States
AS15169Google LLC
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
4216.239.34.36Google · CDNUnited States
AS15169Google LLC
4172.67.171.128Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4141.193.213.11Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
4151.236.16.211Los Angeles, California, United States
AS9009M247 Europe SRL
317--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15AD32C11AC9141A393F7B29F8960D628707FB2784E559B49B3FE112C56D3FDE9232238

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Q6E3NIC8FwL6HyjvF2xqUEfyfZt+N43cHmjDPnbabmC:Q6JKL6HyjanC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:135830:0zSHBBBAAlUQwgoIJaQgoJBMSQRgMg+gc8XBGRoQCDXBFDjQADjKiFCFDlJUEEAEgMJYhAUQjSIiRgkmgIS4gIQ5kAtIAWAh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0083ff83c3df87ff
Perceptual Hash:bc6f463c617e4252
Difference Hash:1726212b3b273631
Wavelet Hash:0083df8383838fff
Color Hash:#ac7a53

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data