ScanMalware.com

Security Scan Report: khaosprimetech.com

Site favicon
Submitted: Oct 14, 2026, 4:40:39 PMCompleted: Oct 14, 2026, 4:41:30 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Compromised site injecting an analyst-vetted ClickFix/EtherHiding malware loader with critical IDS hits and hidden gambling SEO link spam. Visitors should not interact.

Risk Factors (5)
Known malicious ClickFix/EtherHiding kit injected into the page
Critical malware network alerts (EtherHiding exfiltration, ClickFix C2 domain)
Malware loader reported against the primary domain and against a loaded third-party resource
Obfuscated JavaScript hiding blockchain-based stage retrieval and threat-feed hosts
Large hidden link farm pushing gambling/betting sites unrelated to the page content
Domain age information unavailable

Details

Page Title

khasoprime

Scan Type

public

Domain Name Analysis

The domain 'khaosprimetech.com' uses the commercial generic top-level domain (.com) with no subdomain. Its registrable label 'khaosprimetech' stretches across 14 characters with 5 vowels and nine consonants. Breaking it apart gives four words: khao, s, prime, tech. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://khaosprimetech.com

Page Load Overview

5.44s
Total Load Time
62 KB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:43%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh-Hans
Text Length:6,350 chars
Detector Agreement:100%
Language mismatch: Declared as zh-Hans but detected as tr

Website Classification

Primary Category

gambling betting90% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
90%
adult content
59%
government public service
49%
technology software
46%
cryptocurrency blockchain
39%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3124.222.201.188Shanghai, Shanghai, China
AS45090Shenzhen Tencent Computer Systems Company Limited
3104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
93--

Detected Technologies6

WordPressv7.0
100%
MetaGenerator
100%
PHP
50%
MySQL
50%
HSTS
40%
Twenty Twenty-One
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E55374B380C4212D9F0AC39C61A5F13FD5C766AE9E629EA7B8E76801F8106F750116DF

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:Vkc0zDBR+V+r7VH9rQVTtifL/0SWRZdypHyA7vUsuo0sCb2kDtlEY:VIF7d9J8SUypSA7vUsHkR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:66038:chCgoEsTQUgRgJQDAgG1lAGQQrTkQBAnYGUoEBSMBgQQoIBIncICMZYCtCQ92AIULkytBr0CSOCgQEGVFoiIKkMphicAQiEj

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9199ff8181ffffff
Perceptual Hash:ef6d844f2fb09092
Difference Hash:232380232b840000
Wavelet Hash:91ffcf8190f6c0c0
Color Hash:#ac539c

Other Hashes

Crop Resistant:232380232b840000

Scan History

Scan history not available

Unable to load historical scan data