Security Scan Report: undoism.org

Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 9 domains to perform 109 HTTP transactions. The main domain is undoism.org and was registered 3 years 5 months ago.

Submitted URL: https://undoism.org

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Legitimate-looking yoga site compromised with a ClickFix/EtherHiding malware loader; obfuscated scripts and CRITICAL IDS alerts confirm active malware distribution. Do not browse.

Risk Factors (4)
Known ClickFix/EtherHiding malware kit injected into the page (compromised site)
Obfuscated JavaScript with blockchain RPC sink used to fetch a second-stage payload
Multiple CRITICAL network IDS malware alerts tied to this page's traffic
Third-party threat-feed resources (zvh4.com, 1rpc.io, 0xrpc.io, gateway.tenderly.co) loaded/hidden in scripts
Domain age information unavailable

Details

Page Title

Undoism™ | The process of undoing everything that disturbs your essential nature of peace and happiness|

Scan Type

public

Domain Name Analysis

Within the non-profit oriented generic top-level domain (.org), 'undoism.org' is registered while skipping any subdomain. The core label 'undoism' covers 7 characters holding 3 vowels versus four consonants. Segmentation suggests 3 words: undo, is, m. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://undoism.org

Page Load Overview

0.88s
Total Load Time
30.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,919 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical65% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
65%
adult content
30%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19194.1.147.56Manchester, England, United Kingdom
AS210250K Media Tech Ltd.
10194.1.147.76Manchester, England, United Kingdom
AS210250K Media Tech Ltd.
10142.251.110.95Google · CDNUnited States
AS15169Google LLC
10142.251.154.119Google · CDNUnited States
AS15169Google LLC
10142.251.14.94Google · CDNUnited States
AS15169Google LLC
10142.251.110.94Google · CDNUnited States
AS15169Google LLC
10104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10142.251.153.119Google · CDNUnited States
AS15169Google LLC
10188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1035.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
10910--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T118A51E4C9F606985327B9180BBDE678DC53CB1A3F5B105CEB9CC6552DA85BE810C22BF

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:ojb3DzVftf1jbNfO7wlnZSnL1Kxf9eAEKNautcDmoj686I:oPTzVftf1jbNfO7wlnZSnL1KxY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2185086:EhKvQYGwKQATVFMosIDgBgZnCGDAEIAwYh0FRQQZBRpTRNAJwIFQCksRBjmwFoACgCAHTUJAxCWKXoMDeXIEAKrjQiAJcwUZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000018000000ffff
Perceptual Hash:8e4fa032f77f804c
Difference Hash:1171b17171955105
Wavelet Hash:00191999bc01ffff
Color Hash:010000001c0

Scan History

Scan history not available

Unable to load historical scan data