ScanMalware.com

Security Scan Report: lunardrum.com

Site favicon
Submitted: Oct 9, 2026, 5:55:58 AMCompleted: Oct 9, 2026, 5:56:52 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Legitimate 14-year-old Thai drum shop whose WordPress site is compromised: analyst-vetted ErrTraffic/Exvicy ClickFix loader, CRITICAL EtherHiding/ClickFix IDS alerts and Vidar/exploit-kit resources. Do not load it.

Risk Factors (5)
CRITICAL YARA + roster-anchored ErrTraffic/Exvicy ClickFix loader injected into the page
CRITICAL Suricata alerts for EtherHiding exfiltration and ClickFix domain contact
Page pulls scripts/resources from domains flagged for Vidar stealer and exploit-kit malware
Obfuscated dynamic code execution (eval/Function) matching the injected loader pattern
Primary domain flagged as a malware loader in threat intelligence
Domain age information unavailable

Details

Page Title

LUNAR เครื่องดนตรีอาทิเช่น กลองใหญ่ กลองแสนร์ กลองทรีโอ

Scan Type

public

Domain Name Analysis

Domain 'lunardrum.com' uses the commercial generic top-level domain (.com) with no subdomain. Count 9 characters in 'lunardrum' with 3 vowels and six consonants. It segments into 2 words: lunar, drum. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lunardrum.com

Page Load Overview

18.91s
Total Load Time
5.8 MB
Total Size

Language Analysis

Primary Language

🇹🇭Thai
Code: th
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:th
Text Length:7,869 chars
Detector Agreement:80%

Website Classification

Primary Category

adult content43% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
43%
documentation technical
43%
corporate
25%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
26103.86.51.56Bangkok, Bangkok, Thailand
AS58955Bangmod Enterprise Co., Ltd.
4142.250.154.95Google · CDNUnited States
AS15169Google LLC
4188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
4104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
435.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
4104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17037--

Detected Technologies9

WordPressv6.4.13
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
YouTube
20%
WooCommerce
20%
Swiper
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B224A4A33385057A624B09CB5216324E60F5DED7F862F0D8B7B351EAB1F8E817531A72

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:aYrQhEf5UAEzgviQISHhjFB5MG5pE3ZcAx:7rvpQZcAx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:223614:WAIlFko5SQIBENiAhBOoIAgPgIFZuAAaAAQABCdRboA1BKhIkwAAQugAkCPVugPiFHGHoFOAGLAGSiWWchEKAyCgEEEAVEAQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfc7c7c3ffffffe7
Perceptual Hash:b03892ccc7cdc7c3
Difference Hash:101c1e060000000c
Wavelet Hash:3b034e003f3f3f03
Color Hash:#8c40bf

Other Hashes

Crop Resistant:101c1e060000000c

Scan History

Scan history not available

Unable to load historical scan data