Security Scan Report: hipposonline.com

Redirected to:
https://www.hipposonline.com/
Site favicon
Submitted: Oct 14, 2026, 5:07:08 PMCompleted: Oct 14, 2026, 5:08:18 PMpubliccompleted

This website contacted 59 IPs in 2 countries across 42 domains to perform 367 HTTP transactions. The main domain is hipposonline.com and was registered 29 years ago.

Submitted URL: https://hipposonline.com

Effective URL:

https://www.hipposonline.com/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Legitimate-looking AV business site whose content is compromised: analyst-vetted IClickFix/EtherHiding loader injection plus a CRITICAL ET MALWARE IDS alert and corroborated malware threat-intel matches. Avoid visiting.

Risk Factors (4)
Known malicious ClickFix/EtherHiding kit injected into page content (analyst-vetted kit roster, CRITICAL)
CRITICAL IDS alert for EtherHiding exfiltration malware on the page
Threat-intel domain matches for malware loader and corroborated iclickfix indicator on a loaded resource
Evidence of site compromise (malicious script served from an otherwise legitimate business domain)
Domain age information unavailable

Details

Page Title

Your Local Technology Experts in Columbia County, NY | Hippo's

Scan Type

public

Domain Name Analysis

The domain name 'hipposonline.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'hipposonline' spans 12 characters with 5 vowels and seven consonants. Splitting it apart reveals 2 words: hippos, online. Average segment length settles at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hipposonline.com

Page Load Overview

11.53s
Total Load Time
4.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:53%
Script:Latin
Direction:ltr

Detection Details

Text Length:8,873 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19104.26.9.216Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.26.8.216Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6192.0.77.37San Francisco, California, United States
AS2635Automattic, Inc
6188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.14.97Google · CDNUnited States
AS15169Google LLC
6146.75.121.91Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
674.125.29.95Google · CDNUnited States
AS15169Google LLC
6192.0.77.2San Francisco, California, United States
AS2635Automattic, Inc
667.227.206.240United States
AS32244Liquid Web, L.L.C
6178.156.214.66Ashburn, Virginia, United States
AS213230Hetzner Online GmbH
36759--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13FF2FA72915544D27F1DE3A4F5A2B32CD259A5228D019EEBF0EC115C1BA89FF10E3A2F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:rTGcFog2zYrx+OEgEI0N1pzYmYyxvyuKxMGEiQbW42U/25r/ZdSZUaAfkWcZ:WcFAmgOLEzYmYOvDoQeu2NZdyp6A

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:35262:kCWIQ5woTkRpCghAiiIAYEABAaMQgOZBqKSEGAy4IQCqeaEhEFRYJIhAIAAYAIvDaQBqQpyAASFCNqtBcY2JshQAwDWlAMCA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bfffffd98181ffff
Perceptual Hash:ae96963e8e86ae88
Difference Hash:6321c93333330181
Wavelet Hash:bf9bff81010181cf
Color Hash:#3a785b

Other Hashes

Crop Resistant:6321c93333330181

Scan History

Scan history not available

Unable to load historical scan data