Security Scan Report: ambiancewax.com

Site favicon
Submitted: Sep 23, 2026, 1:17:59 PMCompleted: Sep 23, 2026, 1:20:12 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Hijacked domain serving Turkish gambling SEO spam while pulling exploit-kit/Parrot TDS infrastructure flagged by 20 CRITICAL IDS alerts and multi-feed malware IoCs. Do not interact.

Risk Factors
Multiple exploit-kit (ek clearfake-1) threat-intel indicators on resources loaded by the page, multi-feed corroborated
20 CRITICAL Suricata alerts for exploit-kit / Parrot TDS activity
Primary domain flagged as malware (iclickfix)
Repurposed domain: legitimate waxing-business title/content replaced with Turkish gambling affiliate SEO spam
Obfuscated runtime code generation (Function() constructor) alongside blockchain RPC endpoints
Suspicious random-alphabet external domain (ashen-trace-zephyr-draeix.life)
Domain age information unavailable

Details

Page Title

Ambiance Wax

Scan Type

public

Domain Name Analysis

The domain name 'ambiancewax.com' uses the commercial generic top-level domain (.com) with no subdomain. Its registrable label 'ambiancewax' stretches across 11 characters split between 5 vowels and 6 consonants. It segments into 2 words: ambiance, wax. Median word length comes out to 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ambiancewax.com

Page Load Overview

90.21s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:6,555 chars
Detector Agreement:50%

Website Classification

Primary Category

gambling betting45% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
45%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20143.110.150.158Santa Clara, California, United States
AS14061DigitalOcean, LLC
20142.251.110.95Google · CDNUnited States
AS15169Google LLC
20138.124.60.214Switzerland
AS203273NetCrafters OU
20216.252.233.11United States
AS965Webhosting Holdings LLC
20142.251.13.95Google · CDNUnited States
AS15169Google LLC
20104.18.11.59Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
20150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
1407--

Detected Technologies7

WordPressv7.1.2
100%
JQueryv3.7.1
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C3F2C15222E59CFD71DB7F681F2DE788A30B5C11C2994FDBE43AD064235CA8D84A3B06

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:76tDXd3W3gisYlkryG0eJ+pi36DdXELLdhaG5yVkZplJkhDs183U629XiIy4WcTh:76tDXd3W3gisYlkryReJ+pi36DdXELLD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:34284:F4MxABAjdoAheAELIhGQiYyZQRGEhoRsuLIjUIBFACwjBFKAiAhAE8AEMJyeNg0JFrAyOORKFS4GM0AAROgRSeAockQSKFMI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fcfdfdfdfdfdfdfd
Perceptual Hash:aa56565656565656
Difference Hash:0401010101010101
Wavelet Hash:0e0f0f0f01010101
Color Hash:#2dd28d

Other Hashes

Crop Resistant:0401010101010101

Scan History

Scan history not available

Unable to load historical scan data