Security Scan: ScanForTruth

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ef711599-eb52-4b47-aab5-1232f299b0cc Domain and IP registration (RDAP)/api/v1/rdap/ef711599-eb52-4b47-aab5-1232f299b0cc Certificate Transparency/api/v1/ct/wordpress.scanfortruth.com How often this domain was scanned/api/v1/domain/stats/wordpress.scanfortruth.com Scan history for this domain/api/v1/domain/history/wordpress.scanfortruth.com?limit=15

This website contacted 9 IPs in 3 countries across 12 domains to perform 30 HTTP transactions. The main domain is wordpress.scanfortruth.com and was registered 4 months ago.

Submitted URL: https://wordpress.scanfortruth.com

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Compromised WordPress site serving a ClickFix fake-Cloudflare verification overlay that copies a hidden command to the clipboard and tells users to paste it into Terminal — vetted malicious kit with CRITICAL YARA and IDS hits.

Risk Factors (5)

Injected ClickFix social-engineering overlay instructing visitors to paste a clipboard command into Windows Terminal / File Explorer

Disguised as a Cloudflare human-verification challenge with a fabricated Ray ID

ErrTraffic/Exvicy WordPress injection loader (obfuscated base64 XOR + new Function) present in page HTML

Page loads scripts and contacts hosts flagged as malware/EtherHiding infrastructure

EtherHiding exfiltration network alerts (CRITICAL) against blockchain RPC endpoints

Domain age information unavailable

Details

Page Title

ScanForTruth

Scan Type

public

Domain Name Analysis

The domain 'wordpress.scanfortruth.com' uses the commercial generic top-level domain (.com) with subdomain 'wordpress'. The second-level label 'scanfortruth' is 12 characters long containing 3 vowels alongside nine consonants. It segments into 4 words: s, can, for, truth. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.09s

Total Load Time

1.2 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:2,545 chars

Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence

Type: dynamic

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	159.223.248.166	Frankfurt am Main, Hesse, Germany	AS14061DigitalOcean, LLC
3	195.58.146.210	Denmark	AS9009M247 Europe SRL
3	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
3	104.20.23.154Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.21.3.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
30	9	-	-