Security Report: vitalbusinesservices.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6605101c-ef58-4b65-9ddb-55e3b9d5cbc0 Domain and IP registration (RDAP)/api/v1/rdap/6605101c-ef58-4b65-9ddb-55e3b9d5cbc0How often this domain was scanned/api/v1/domain/stats/vitalbusinesservices.com Scan history for this domain/api/v1/domain/history/vitalbusinesservices.com?limit=15

This website contacted 10 IPs in 2 countries across 12 domains to perform 131 HTTP transactions. The main domain is vitalbusinesservices.com and was registered 6 years ago.

Submitted URL: https://vitalbusinesservices.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised accounting-firm site serving a ClickFix 'Human Verification' overlay (Win+X -> Terminal) with an EtherHiding blockchain loader; analyst-vetted CRITICAL kit plus CRITICAL YARA and IDS hits.

Risk Factors (5)

Known ClickFix overlay kit injected into a compromised legitimate website

Living-off-the-land malware loader instructing visitors to paste commands into Windows Terminal

EtherHiding blockchain-based payload staging via Polygon RPC endpoints

Obfuscated script hiding threat-feed C2/loader hosts after decoding

Multi-source corroborated threat-intelligence matches on loaded resources (interseq.at, 178.16.52.101)

Domain age information unavailable

Details

Page Title

Vital Business - Audit, Accounts, Tax, SECP, & Feasibilities

Scan Type

public

Favicon Hash

MMH3: 761001256

MD5: df049c7102959032bed934f5558dbb1f

Domain Name Analysis

The domain name 'vitalbusinesservices.com' uses the commercial generic top-level domain (.com). The second-level label 'vitalbusinesservices' is 20 characters long containing 8 vowels alongside 12 consonants. Word splitting yields 5 words: vital, bus, in, es, services. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.11s

Total Load Time

7.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:3,083 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business57% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

57%

blog personal website

33%

education learning

33%

technology software

30%

corporate

25%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	5.172.176.101	St Louis, Missouri, United States	AS7393CYBERCON, INC.
13	192.178.183.95Google · CDN	United States	AS15169Google LLC
13	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
13	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
13	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
13	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
13	192.178.183.94Google · CDN	United States	AS15169Google LLC
13	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
13	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
13	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
131	10	-	-