ScanMalware.com

Security Scan Report: s.yam.com

Redirected to:
https://suomengvalve.com/wp-content/themes/rshMicro365/officeonline/cg...
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e191f0f2-c6f3-46f9-b292-a189388e0df7Domain and IP registration (RDAP)/api/v1/rdap/e191f0f2-c6f3-46f9-b292-a189388e0df7How often this domain was scanned/api/v1/domain/stats/s.yam.comScan history for this domain/api/v1/domain/history/s.yam.com?limit=15
This website contacted 21 IPs in 2 countries across 20 domains to perform 45 HTTP transactions. The main domain is yam.com and was registered 30 years ago.

Submitted URL: https://s.yam.com/NwxbO

Effective URL:
https://suomengvalve.com/wp-content/themes/rshMicro365/officeonline/cg...
Redirected

The Cisco Umbrella rank of the primary domain is #589,431 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 74%

5
Risk Score

URL shortener redirects to a compromised WordPress path serving cloaked, keyword-stuffed travel/affiliate doorway content; no credential forms, but the hacked-host chain and bot-vs-client cloaking warrant avoidance.

Risk Factors (4)
Redirect lands on a compromised WordPress system path (wp-content/themes/.../cgi-bin1) hosting unauthorized content
Cloaked delivery: bot/scanner received 502 while a normal client received the real page
Keyword-stuffed doorway content with affiliate monetization unrelated to the host domain
Shortener used to obscure the true destination of the redirect chain
Safety Factors (6)
No forms on the page — 0 password, 0 payment, 0 email fields (verified form facts)
No JavaScript malware or hunting rule/high-precision scanner hits
No credential exfiltration and no cross-origin form submissions detected
No brand impersonation of a third-party organisation identified
The only threat-intel match is a single-source generic abuse-reputation tag on the shortener, which does not evidence content malware
No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no hunting rule / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable

Details

Page Title

yamShare-縮網址服務other network

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 's.yam.com' is registered, featuring subdomain 's'. The core label 'yam' covers 3 characters containing one vowel alongside two consonants. Word splitting yields one word: yam. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

该狠钢址志秒后自动前往 https://suomengvalve.com/wp-content/therr, 人 Private Car Tour of Suzhou to Shanghai China Legoland Shanghai Private Shanghai Guangfulin Rell... High S...

Page Load Overview

2.51s
Total Load Time
886 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:38 chars
Detector Agreement:50%
Language mismatch: Declared as en but detected as zh

All Detected Languages

🇰🇷ko(95%)🇨🇳zh(5%)

Website Classification

Primary Category

travel tourism65% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

travel tourism
65%
entertainment media
53%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14104.18.30.170Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.110.155Google · CDNUnited States
AS15169Google LLC
252.187.123.178Azure · CLOUDSingapore, Singapore
AS8075Microsoft Corporation
2104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2216.239.34.36Google · CDNUnited States
AS15169Google LLC
2142.251.127.155Google · CDNUnited States
AS15169Google LLC
2142.251.13.94Google · CDNUnited States
AS15169Google LLC
2142.251.110.154Google · CDNUnited States
AS15169Google LLC
4521--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10672D67B6CE70015A553C175ABEA9A0D77328003C146CCE0BEDD9A55DF04EEA2C8BB9D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:aLfMtT3dYYLAWIkIDzqrqJlYN019TRPMPFPPUKPS9p+7tU1yAyubgGatVn0mY4YP:JdY0WhtYi1kNPMKq9nEtubgFhrY4x/I

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:16826:SQxmAeCGMJDGFjWxJZAISkVpCjJVngCgSZsgYwgmBiAggBwMIAEKQSAg0VRIaOKgUFEL9TEElgM4zFLAHWEgHAVIYgMgAdCK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181818003c3c
Perceptual Hash:88649b333333799b
Difference Hash:01b3b3b171317171
Wavelet Hash:0119393d3d393d3d
Color Hash:31000008c00

Other Hashes

Crop Resistant:c4a330303033f0f0,9292929292d39b92,01b3b3b371317171

Scan History

Scan history not available

Unable to load historical scan data