Security Scan Report: webaikiemtien.surge.sh

Site favicon
Submitted: Completed: publiccompleted
This website contacted 32 IPs in 4 countries across 20 domains to perform 353 HTTP transactions. The main domain is surge.sh and was registered 12 years ago.

Submitted URL: https://webaikiemtien.surge.sh/

AI Security Verdict

High Risk

Confidence: 76%

8
Risk Score

Free-hosted Vietnamese 'AUTOProfit AI' money-making scheme selling traffic/view-bot and referral packages with crypto payment; CRITICAL EtherHiding exfiltration IDS alerts plus blockchain RPC and IP-fingerprint lookups indicate active malware/drainer behaviour. Avoid.

Risk Factors (7)
Five CRITICAL IDS alerts for EtherHiding Exfil M2 (blockchain-based C2/exfiltration technique)
Blockchain RPC (BNB Smart Chain) connections combined with external IP-lookup fingerprinting domains
Unrealistic automated passive-income claims with paid tiers and referral downline recruitment
Services advertised include view-botting, traffic pumping and mass backlink/SEO manipulation (ad fraud)
Crypto (USDT BEP20) and personal bank transfer payments to an unverified operator
Hidden link block to multiple popunder/ad-monetisation networks
Free shared-hosting subdomain with unknown creation date and no reputation
Domain age information unavailable

Details

Page Title

AUTOProfit AI — Căn Cứ Nhân Sự AI Đang Hoạt Động 3D & Kinh Doanh Tự Hành

Scan Type

public

Domain Name Analysis

The domain name 'webaikiemtien.surge.sh' uses the .sh country-code top-level domain, featuring subdomain 'webaikiemtien'. The registrable portion 'surge' spans 5 characters split between 2 vowels and 3 consonants. Breaking it apart gives one word: surge. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

2) RACE AOI “Du uO D1 C2 DS OUI $9 Se (Auto-EN) | ERRAND ee enatisn Giao Diện Mobile || +° Ban Mobile Siéu Te 2 | ( TRANG THAI: ĐANG CHẠY ) we) ] en tg te tet mayen ae 11:26:57 (TRA M) +. TONG TÃI SAN...

Page Load Overview

7.76s
Total Load Time
8.8 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:113,892 chars
Detector Agreement:60%

Website Classification

Primary Category

technology software99% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
99%
cryptocurrency blockchain
98%
government public service
98%
documentation technical
97%
corporate business
90%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12188.166.132.94Amsterdam, North Holland, Netherlands
AS14061DigitalOcean, LLC
11143.204.181.82Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
11172.67.75.199Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11104.20.44.133Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11142.251.156.4Google · CDNUnited States
AS15169Google LLC
11151.101.1.91Fastly · CDNUnited States
AS54113Fastly, Inc.
11142.251.145.6Google · CDNUnited States
AS15169Google LLC
1118.64.151.121Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
11159.203.148.75Clifton, New Jersey, United States
AS14061DigitalOcean, LLC
1152.51.98.124Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
35332--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D3D4F911A2F0052251B68855E545EB5B3F80E607E74F079476AC07F6EFCEEB2AA2334D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:LKv7YkPT8qL6ny25Ki1efSqMiSqMiSqMiSqMscGnJ:LKvPT8qu75KiEfdMidMidMidMscGnJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:640371:7KMUBRIiUZwUIPIIDYJZVdbkDTRQgRomR8kQAGSiQINu4EKYTguMkg4QQQAQUFJ1hIAMfiggANAHKQtkRMIoKUBCQRgEM6uu

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000007c7c7c7c7c
Perceptual Hash:c23d3fc29ac23fc0
Difference Hash:0c26ccc9c9c8c9e1
Wavelet Hash:c400647e7c7c7c7c
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data