Security Report: drnidhiagrawal.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/01a4bede-9869-42de-a4df-1099662d55c4 Domain and IP registration (RDAP)/api/v1/rdap/01a4bede-9869-42de-a4df-1099662d55c4How often this domain was scanned/api/v1/domain/stats/drnidhiagrawal.com Scan history for this domain/api/v1/domain/history/drnidhiagrawal.com?limit=15

This website contacted 14 IPs in 3 countries across 9 domains to perform 79 HTTP transactions. The main domain is drnidhiagrawal.com and was registered 2 years 3 months ago.

Submitted URL: https://drnidhiagrawal.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate Noida gynecology site compromised with an injected ClickFix/EtherHiding loader: fake 'Human Verification' overlay, critical malware IDS alerts and a Safe Browsing hit. Do not visit or run any prompted commands.

Risk Factors (5)

Compromised page injecting a fake 'Human Verification' ClickFix overlay that instructs Windows users to open Terminal and run commands

EtherHiding: malware payload address fetched from a blockchain smart contract, hidden in obfuscated JavaScript

CRITICAL network intrusion-detection alerts for EtherHiding exfiltration

Google Safe Browsing unwanted-software detection on the domain

Third-party payload host cloud-browse.codes corroborated by three independent threat feeds

Domain age information unavailable

Details

Page Title

Best Gynecology Clinic in Noida | Dr. Nidhi Agrawal

Scan Type

public

Favicon Hash

MMH3: 170045951

MD5: eba4737b693be80969dd95a9a8af82f3

Domain Name Analysis

The domain 'drnidhiagrawal.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'drnidhiagrawal' is 14 characters long containing 5 vowels alongside nine consonants. Splitting it apart reveals 5 words: dr, nid, hi, agra, wal. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.66s

Total Load Time

1.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:9,495 chars

Detector Agreement:80%

Website Classification

Primary Category

healthcare medical61% confidence

Type: spa

Method: ml+structural

All Detected Categories

healthcare medical

61%

corporate

35%

entertainment media

27%

adult content

26%

news/blog

20%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	172.237.32.11	Mumbai, Maharashtra, India	AS63949Akamai Connected Cloud
5	142.251.110.95Google · CDN	United States	AS15169Google LLC
5	142.251.110.97Google · CDN	United States	AS15169Google LLC
5	172.67.73.254Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.251.14.94Google · CDN	United States	AS15169Google LLC
5	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
5	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
5	216.239.32.36Google · CDN	United States	AS15169Google LLC
5	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.251.14.95Google · CDN	United States	AS15169Google LLC
79	14	-	-