Security Scan Report: malwaretips.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 16 domains to perform 90 HTTP transactions. The main domain is malwaretips.com and was registered 15 years ago.

Submitted URL: https://malwaretips.com/blogs/cathie-wood-scam-exposed/

The Cisco Umbrella rank of the primary domain is #430,681 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 78%

4
Risk Score

The site appears to be a legitimate blog warning about scams, but obfuscated scripts and low domain ranking raise moderate concerns.

Risk Factors (5)
Obfuscated JavaScript with eval() and high‑entropy patterns
Low domain reputation ranking
Moderate brand‑impersonation detection (Facebook name used on unrelated domain)
ML classifier indicating phishing content
Critical JavaScript behavior flags (charcode manipulation, excessive concatenation)
Safety Factors (5)
Domain is well‑established (over 15 years old)
Self‑branding matches the domain (malwaretips.com)
No credential or payment forms detected
No Indicators of Compromise or hunting rule malware matches
No network IDS alerts
Domain age information unavailable

Details

Page Title

Cathie Wood Investment Scam: WhatsApp & Facebook Fraud Warning

Scan Type

public

Domain Name Analysis

The domain 'malwaretips.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'malwaretips' stretches across 11 characters holding four vowels versus 7 consonants. Tokenizing the label suggests 2 words: malware, tips. Median word length is 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://malwaretips.com/blogs/cathie-wood-scam-exposed/

Page Load Overview

3.89s
Total Load Time
2.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:75,126 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam51% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

phishing scam
51%
news/blog
35%
social media network
27%
forum
25%

Detected Features

Search
Articles
Comments
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18142.251.110.155United States
AS15169Google LLC
18142.250.154.97United States
AS15169Google LLC
18172.67.69.250United States
AS13335Cloudflare, Inc.
18104.16.79.73United States
AS13335Cloudflare, Inc.
18142.251.13.95United States
AS15169Google LLC
905--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18FB4A431F800193F6A3B05C4E749D70A72D6A21FF4E90850D6E6476886E9F78F52E2E7

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:mwINsRWuObnIttyzcs0BSYlTLBowhiARnT:mwbWuObnIttyzcsrY5LBXxT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:500339:ShSEACEplIIUwIAAEC8GA6gBxQQCk5wgPVAVNAB5UAABSAJOQGTRQBYfEALBRpQSBcAIDEktsBUtCAVaYjgFIAQBASJOBALI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000183cffffffdf
Perceptual Hash:c94836e3b7371c19
Difference Hash:8cf2b2b2b3b2b13d
Wavelet Hash:00001818fdffff8f
Color Hash:#b2c587

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data