ScanMalware.com

Security Scan Report: vially.consulting

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5855bbf5-c6f9-463f-8d88-6f3a4bb97e1eDomain and IP registration (RDAP)/api/v1/rdap/5855bbf5-c6f9-463f-8d88-6f3a4bb97e1eHow often this domain was scanned/api/v1/domain/stats/vially.consultingScan history for this domain/api/v1/domain/history/vially.consulting?limit=15
This website contacted 16 IPs in 4 countries across 17 domains to perform 1953 HTTP transactions. The main domain is vially.consulting and was registered 3 years 2 months ago.

Submitted URL: https://vially.consulting

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Compromised site serving Macfinger ClickFix: fake Cloudflare 'I'm not a robot' page copies a cmd.exe/PowerShell command to the clipboard to install an AMOS stealer, with EtherHiding staging. Do not paste anything.

Risk Factors (5)
ClickFix clipboard/shell-injection malware delivery targeting visitors
Known stealer kit (Macfinger ClickFix / AMOS) identified by vetted kit roster
Hidden-window PowerShell staged in page script with remote payload fetch from fingerprint-veri.info
EtherHiding via blockchain RPC endpoints to resolve next-stage payloads
Injected German-language gambling SEO spam content on a site that is otherwise a perfume-market consultancy, indicating the site is compromised
Domain age information unavailable

Details

Page Title

Entdecke neue Duftprobenstrategie - Vially

Scan Type

public

Domain Name Analysis

Within the .consulting top-level domain, 'vially.consulting' is registered. The registrable portion 'vially' spans 6 characters holding 2 vowels versus 4 consonants. Segmentation suggests two words: vi, ally. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://vially.consulting

Page Load Overview

75.09s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:34,404 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media92% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
92%
gambling betting
92%
news media journalism
73%
education learning
66%
blog personal website
64%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
123185.243.11.95Nuremberg, Bavaria, Germany
AS197540netcup GmbH
122172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
122185.92.183.208Riga, Riga, Latvia
AS56971Cgi Global Limited
122142.250.154.95Google · CDNUnited States
AS15169Google LLC
122194.76.136.6Cyprus
AS202412Omegatech LTD
122142.251.14.94Google · CDNUnited States
AS15169Google LLC
122188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
122157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
122142.251.127.84Google · CDNUnited States
AS15169Google LLC
12213.33.52.208Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
195316--

Detected Technologies8

WordPressv7.1.3
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
Nginx
40%
jQuery Migrate
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E3A440239A620E3B63D2029541CC25DA64EFE65360D820FDF29F59D9FFBE98380F4645

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:q5bqS5ke5hyiqhyM6O9/G0fjmZ9PXpyS5wtENWF3UFYmtBUt4HC3nv2w9aQ5RFay:QOoOH6O9/G0fj5M2EFY2mFI5NS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:474792:I6Uin1RCm6QCoAQEnkJA0VgABYAQ1grYjIgJBcABSqcAEOIfVCYSAMENAQgpJBqG1QS8FKvYjEJKVXq4BBZJJWAKCDiFAKK1

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfcfc3c3fffffff7
Perceptual Hash:b03193c7c6ccccce
Difference Hash:1818163600000008
Wavelet Hash:fcc4c0c03c3cff00
Color Hash:#78533a

Other Hashes

Crop Resistant:1818163600000008

Scan History

Scan history not available

Unable to load historical scan data