ScanMalware.com

Security Scan Report: www.wixconsulting.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c4d368f0-2d45-4235-b66b-f6b85b8723b4Domain and IP registration (RDAP)/api/v1/rdap/c4d368f0-2d45-4235-b66b-f6b85b8723b4How often this domain was scanned/api/v1/domain/stats/wixconsulting.comScan history for this domain/api/v1/domain/history/wixconsulting.com?limit=15
This website contacted 4 IPs in 2 countries across 4 domains to perform 14 HTTP transactions. The main domain is wixconsulting.com and was registered 27 years ago.

Submitted URL: https://www.wixconsulting.com

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Aged but apparently hijacked WordPress site carrying multi-source malware Indicators of Compromise (clearfake/loader) and a CRITICAL EtherHiding blockchain-C2 alert; no forms, but do not load or interact.

Risk Factors (6)
Multi-source content-malware Indicators of Compromise on the primary domain (clearfake / unknown loader)
CRITICAL IDS alert: ET MALWARE EtherHiding Exfil M2
HIGH IDS alert: ET DROP Spamhaus DROP Listed Traffic
Page loads scripts from a domain flagged as a malicious host (checkyoubrowse.codes) and from an address reported as an exploit kit
Blockchain RPC/contract requests (quiknode Polygon RPC, getDomain()) consistent with EtherHiding C2 retrieval
Self-hosted default WordPress install with no real content, typical of a hijacked site
Domain age information unavailable

Details

Page Title

WIX Consulting – Just another WordPress site

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.wixconsulting.com' on the commercial generic top-level domain (.com), featuring subdomain 'www'. Count 13 characters in 'wixconsulting' split between 4 vowels and 9 consonants. It segments into three words: wi, x, consulting. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.wixconsulting.com

Page Load Overview

2.68s
Total Load Time
628 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:247 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software48% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
48%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5192.252.154.32Waltham, Massachusetts, United States
AS8739ICDSoft Ltd.
3132.145.155.63Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
3178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
144--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15983B56197B048F479BB473B5B44A2145667EA03C50977E9F1F3E294B48CBA206F3F0A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:GLgckRiBmgT0cTrnbO23kEYypwYMIu3IykYfZobwemlUVuXwamShMAtaR/:GLgckRiBmgT0cTrnbO23kGafZobweml0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:83157:B0wAosWg/gWKEV6AhsNaImFUgECMBhGA0aBAFAgGqABLgwvKAAkAAVg4YNs1REiOxCwiAgkYEQkQKIybRIUbFIC0EAyH90FC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000000ffffffff
Perceptual Hash:dd0aa3f54c18b3a3
Difference Hash:44500932b0081000
Wavelet Hash:00000000ffffffff
Color Hash:#53ac62

Other Hashes

Crop Resistant:44500932b0081000

Scan History

Scan history not available

Unable to load historical scan data