Security Scan Report: thegreathopembchurch.org

Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 5 domains to perform 45 HTTP transactions. The main domain is thegreathopembchurch.org and was registered 6 years ago.

Submitted URL: https://thegreathopembchurch.org

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate church site appears compromised: an analyst-vetted ClickFix/EtherHiding loader is injected, with CRITICAL IDS alerts and the multi-feed malware domain zvh4.com contacted on load.

Risk Factors (5)
Compromised page serving a ClickFix/EtherHiding malware injection to visitors
Multiple CRITICAL network IDS malware alerts tied to this page load
Third-party malware domain (zvh4.com) resolved and contacted during page load
Obfuscated script with threat-feed hosts revealed only after decoding
Blockchain RPC contact used to fetch a hidden second-stage payload
Domain age information unavailable

Details

Page Title

Great Hope M.B.C.

Scan Type

public

Domain Name Analysis

You're looking at domain 'thegreathopembchurch.org' on the non-profit oriented generic top-level domain (.org) while skipping any subdomain. The registrable portion 'thegreathopembchurch' spans 20 characters with six vowels and 14 consonants. Splitting it apart reveals 5 words: the, great, hope, mb, church. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://thegreathopembchurch.org

Page Load Overview

11.13s
Total Load Time
774 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,361 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10216.55.149.9Canada
AS30447Internet Names For Business Inc.
7172.217.208.95Google · CDNUnited States
AS15169Google LLC
766.175.41.113Canada
AS30447Internet Names For Business Inc.
7142.251.14.95Google · CDNUnited States
AS15169Google LLC
7104.26.12.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
456--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T130533D32709A1862336F879E7053736CA259D955C2029EA5F5FF703896B0DF632E360E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:7F7d9Jo4ypxe8PiaMW886x+QGaVWkvJ/mjfIjyPQKl:7RdUZPe8Pi/W8Bx3GaVWkvJ/WfMyPQKl

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:61502:KEmLTIDLTEE2DA/Ms0QIjWRYBEFh4QjIwJMABRYAqFOrcgyMACAEQbMBzFAGFCAnJwg1AJucY1EAhoUAtZkCeFgummIJEBDR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e0c000000071ffff
Perceptual Hash:e373f36266970606
Difference Hash:cd8ae89607c30c0f
Wavelet Hash:e4c0200001ffffff
Color Hash:#4c783a

Scan History

Scan history not available

Unable to load historical scan data