Security Scan Report: serenespheresph.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 4 domains to perform 137 HTTP transactions. The main domain is serenespheresph.com and was registered 2 years ago.

Submitted URL: https://serenespheresph.com

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Legitimate-looking Pranic Healing shop whose pages carry an analyst-vetted Macfinger ClickFix (AMOS stealer) injected loader and a flagged malicious third-party domain; domain also appears as malware in threat intel.

Risk Factors (5)
Critical malicious-kit identification (Macfinger ClickFix / AMOS stealer loader) injected into page HTML
Content-malware threat-intel match on the primary domain
Malicious third-party domain (exploit-kit related) loaded by the page
Compromised-site malware delivery to visitors (including macOS ClickFix pasting instructions)
Domain is unranked in Cisco Umbrella despite serving malicious loader content
Domain age information unavailable

Details

Page Title

Serenespheresph

Scan Type

public

Domain Name Analysis

Domain 'serenespheresph.com' uses the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'serenespheresph' stretches across 15 characters containing 5 vowels alongside ten consonants. It segments into 3 words: serene, spheres, ph. Average segment length settles at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Oy Q Raw i") Serene Spheres SpiritualityePeace+Sereneipity Home Aboutus Shop Workshop Services ContactUs _Blog E eis Ahi L M7 q

Page Load Overview

3.69s
Total Load Time
3.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:6,152 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping43% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

e-commerce shopping
43%
healthcare medical
28%
news/blog
20%
e-commerce
20%

Detected Features

Login Form
Search
Articles
Products

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3543.225.55.220Mumbai, Maharashtra, India
34142.250.154.95Google · CDNUnited States
AS15169Google LLC
34185.173.147.53Ashburn, Virginia, United States
AS203273NetCrafters OU
34142.251.14.94Google · CDNUnited States
AS15169Google LLC
1374--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BCB4D9E6C7A4C0A2B007C961CDFD9BADF00771AAD6C452B899FFE664D352DD1A21870C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:g5wEcW0iNG7xPAw/A5AmuALfAKACAZhMZjAN+Cd7r7pOGVYZmDKDzFgRkyfGWQUR:HW06hSEUv3Df7PRSpWePh0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:541986:g9AFAAxCAguAEjiIQIHSYYDgCFAUBAMtgK5MIlAIAGC02IjReQkB8OsKWMBGI4RcHNQKmDZ9ZAakGAAQoA0mADViEoECoE8A

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff90f9190080ffff
Perceptual Hash:d94d9672a586f0a5
Difference Hash:2d2123735a195130
Wavelet Hash:ff90f0100080ffff
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data