Security Scan Report: mythsandarts.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 2 countries across 10 domains to perform 85 HTTP transactions. The main domain is mythsandarts.com and was registered 7 months ago.

Submitted URL: https://mythsandarts.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Compromised site serving a ClickFix/EtherHiding loader: analyst-vetted kit match, critical IDS EtherHiding/ClickFix alerts, and malware-flagged zvh4.com. Legitimate-looking studio content is the cover.

Risk Factors (5)
Known malicious ClickFix/EtherHiding kit injected into the page (compromised site serving a loader)
Obfuscated JavaScript hides threat-feed hosts (1rpc.io, gateway.tenderly.co, sepolia.gateway.tenderly.co) only visible after decoding
Critical IDS malware alerts tied to EtherHiding exfiltration and ClickFix command domain
Threat-intelligence match on the primary domain (mythsandarts.com) as an unknown malware loader
Third-party malicious domain zvh4.com loaded by the page
Domain age information unavailable

Details

Page Title

Myths & Arts

Scan Type

public

Domain Name Analysis

The domain 'mythsandarts.com' uses the commercial generic top-level domain (.com) with no subdomain. Its registrable label 'mythsandarts' stretches across 12 characters containing 2 vowels alongside ten consonants. Breaking it apart gives 3 words: myths, and, arts. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mythsandarts.com

Page Load Overview

7.57s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:6,362 chars
Detector Agreement:100%
Language mismatch: Declared as ru-RU but detected as en

Website Classification

Primary Category

documentation technical25% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
25%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1394.158.246.181Chisinau, Chișinău Municipality, Moldova
AS39798MivoCloud SRL
6142.251.110.97Google · CDNUnited States
AS15169Google LLC
6142.251.14.95Google · CDNUnited States
AS15169Google LLC
6104.18.42.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6216.239.32.36Google · CDNUnited States
AS15169Google LLC
6142.251.127.155Google · CDNUnited States
AS15169Google LLC
6142.251.14.94Google · CDNUnited States
AS15169Google LLC
6142.250.154.94Google · CDNUnited States
AS15169Google LLC
6172.64.145.29Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8513--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T143F34A7176952876218F03DFE063770C61DAEBE6C2429BE6B4FD1160A7B4CE1728329D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:HCRdY90bDBJBbOQ036d+NHYRtTwi8/xwC5T3Wa187/r87nSLGS7iOT6mzLbDzI4J:iRdpJ7aQ46dy4RJw9/xwC5V1E

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:170124:nuAAowBwFk8gBgQgHETDTnAxAgqWnl15w4EDAFAE4Bhg0WIQKkCZYQgjgCgApQwwyEgC0AJSoTyBEMcAYAyMQEgsQCrAgJzq

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0020797d753d1c1c
Perceptual Hash:8a661d36c7279939
Difference Hash:6fa1d3e9c9e9f931
Wavelet Hash:0068797d7d3d1c1d
Color Hash:#1f936f

Scan History

Scan history not available

Unable to load historical scan data