ScanMalware.com

Security Scan Report: toolsinformer.com

Site favicon
Submitted: Sep 16, 2026, 12:47:30 AMCompleted: Sep 16, 2026, 12:48:00 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 90%

8
Risk Score

Page appears to be a tool review blog but network indicators show malware/exploit kit activity (EtherHiding, ErrTraffic) and its domain is flagged as a malware loader. Avoid interaction.

Risk Factors
Critical network IDS alerts indicate malware exfiltration and an exploit kit check-in.
Primary domain has a threat-intel match for a malware loader.
Third-party resources loaded by the page match multi-source malicious host blocklists.
Domain is unranked in Cisco Umbrella and has a low legitimacy score.
Blockchain RPC and Ethereum contract requests are associated with known malware C2/exfil activity.
Domain age information unavailable

Details

Page Title

Tools Informer - Helping You Choose the Right Tools

Scan Type

public

Domain Name Analysis

Domain 'toolsinformer.com' uses the commercial generic top-level domain (.com). Count 13 characters in 'toolsinformer' containing 5 vowels alongside eight consonants. Splitting it apart reveals 3 words: tools, in, former. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://toolsinformer.com

Page Load Overview

4.86s
Total Load Time
521 KB
Total Size

Language Analysis

Primary Language

馃嚭馃嚫English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:5,060 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical55% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
55%
real estate property
55%
education learning
45%
corporate
25%
news/blog
20%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10104.21.43.2Cloudflare 路 WAFUnited States
AS13335Cloudflare, Inc.
4188.114.96.9Cloudflare 路 WAFUnited States
AS13335Cloudflare, Inc.
4172.67.130.228Cloudflare 路 WAFUnited States
AS13335Cloudflare, Inc.
435.227.193.242Google 路 CDNKansas City, Missouri, United States
AS396982Google LLC
4172.67.215.9Cloudflare 路 WAFUnited States
AS13335Cloudflare, Inc.
4188.114.97.9Cloudflare 路 WAFUnited States
AS13335Cloudflare, Inc.
4104.26.5.88Cloudflare 路 WAFUnited States
AS13335Cloudflare, Inc.
347--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18E63DA7253A044FA764FC7F84155732CA1D8EE42DA56636AB1F1F0A8A48CDD708B6B0F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Q7Joz7ypN7CpBAW+tsD6pnQRiT89OvYsD+tAXSB0Lw:QNozGv7Cr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:67604:RFMDZGhENgRYQwTkgF5AgNFIHGkg1CjQwUOKwkIiVQikkAfKEiQg2dpESFVYBkQgrygIYEhWABiLBoBZWGkJsJYIQgG4EACD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffff818181ffff
Perceptual Hash:be17c53e3b14444b
Difference Hash:6c402e2f2b2b2b2b
Wavelet Hash:00ffaf818181e3fb
Color Hash:#bf4a40

Other Hashes

Crop Resistant:6c402e2f2b2b2b2b,0101021616060101,0ccc5514b28e3233,149c4c18d47edd93,3514141687cd4d90

Scan History

Scan history not available

Unable to load historical scan data