Security Report: vocacademyltd.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/218c1ca9-f364-41ab-8e01-7992b90304a1 Domain and IP registration (RDAP)/api/v1/rdap/218c1ca9-f364-41ab-8e01-7992b90304a1How often this domain was scanned/api/v1/domain/stats/vocacademyltd.com Scan history for this domain/api/v1/domain/history/vocacademyltd.com?limit=15

This website contacted 13 IPs in 2 countries across 17 domains to perform 136 HTTP transactions. The main domain is vocacademyltd.com and was registered 3 years 2 months ago.

Submitted URL: https://vocacademyltd.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Legitimate-looking VOC Academy WordPress site that is compromised: an ErrTraffic/Exvicy loader with EtherHiding blockchain RPC exfiltration and critical exploit-kit IDS alerts serves malware to every visitor. Avoid.

Risk Factors (5)

Known malicious kit (ErrTraffic / Exvicy WordPress loader) confirmed by analyst-vetted roster

EtherHiding exfiltration through blockchain RPC endpoints with critical IDS alerts

Content-malware indicator on the primary domain (single-source, unverified 'unknown loader')

Page loads multiple threat-feed domains (webanalytics-cdn.sbs, sky.dolcefantasia.us, codes.browse-cdn.beer, rpc-mainnet.matic.quiknode.pro) via obfuscated script

Signs of a compromised WordPress install injecting an exploit-kit loader into normal site content

Domain age information unavailable

Details

Page Title

VOC Academy – your top-notch International Education service provider

Scan Type

public

Favicon Hash

MMH3: -1999910135

MD5: 54eef71fe7a4271e3462dc53c6d20630

Domain Name Analysis

The domain 'vocacademyltd.com' uses the commercial generic top-level domain (.com) and has no subdomain. The core label 'vocacademyltd' covers 13 characters holding 4 vowels versus 9 consonants. Splitting it apart reveals three words: voc, academy, ltd. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

11.45s

Total Load Time

4.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:6,927 chars

Detector Agreement:100%

Website Classification

Primary Category

education learning79% confidence

Type: spa

Method: ml+structural

All Detected Categories

education learning

79%

adult content

30%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
16	131.153.147.178	Ashburn, Virginia, United States	AS19437SECURED SERVERS LLC
10	142.251.14.95Google · CDN	United States	AS15169Google LLC
10	192.0.76.3	San Francisco, California, United States	AS2635Automattic, Inc
10	208.115.201.238	Frankfurt am Main, Hesse, Germany	AS46475Limestone Networks, Inc.
10	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	2.27.5.107	United States	AS202226Great Flower
10	142.250.154.94Google · CDN	United States	AS15169Google LLC
10	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
136	13	-	-