Security Scan Report: sna247supportservices.org

Site favicon
Submitted: Oct 3, 2026, 4:25:05 AMCompleted: Oct 3, 2026, 4:25:44 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Long-standing UK family-support site appears compromised: its HTML carries two CRITICAL, analyst-vetted WordPress-injection and ClickFix stealer loaders, plus beacons to an unranked script host. Avoid interacting.

Risk Factors (5)
Injected ErrTraffic/Exvicy WordPress loader (CRITICAL, roster-anchored)
Injected Macfinger ClickFix stealer first-stage loader (CRITICAL, roster-anchored)
Unranked script host vale-quaeum-a4hc9.top contacted via sendBeacon
Blockchain RPC connection (rpc-mainnet.matic.quiknode.pro) loaded by page scripts
Bot-protection/502 mismatch between datacenter scanner and residential client (consistent with cloaked delivery)
Domain age information unavailable

Details

Page Title

Home - Family Support Servicesother network

Scan Type

public

Domain Name Analysis

You're looking at domain 'sna247supportservices.org' on the non-profit oriented generic top-level domain (.org) while skipping any subdomain. The core label 'sna247supportservices' covers 21 characters split between six vowels and 12 consonants; it also includes three digits. Tokenizing the label suggests 5 words: s, na, 247, support, services. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sna247supportservices.org/

Page Load Overview

1.72s
Total Load Time
8 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:5,802 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service67% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
67%
corporate
25%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3178.18.126.20United Kingdom
AS34762Combell NV
0142.251.110.95Google · CDNUnited States
AS15169Google LLC
077.221.153.211Paris, Île-de-France, France
AS210644Aeza Group LLC
0142.251.156.119Google · CDNUnited States
AS15169Google LLC
0192.178.183.97Google · CDNUnited States
AS15169Google LLC
0142.251.14.94Google · CDNUnited States
AS15169Google LLC
0192.178.183.138Google · CDNUnited States
AS15169Google LLC
0142.251.20.94Google · CDNUnited States
AS15169Google LLC
0132.145.155.63Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
0142.250.154.149Google · CDNUnited States
AS15169Google LLC
316--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T138D3A6617D5B2826221F15DF9007764C90C6CBF4EB92B6F1F2F6512892F4DE037A326A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:HYypWb12S14N750yWbbEzwJufQL7Z19LSL3KiHmaVeZHG4lLB3P32VwxRZS:H5Yb1zLym8KiHmaVeZHGoLB3PG4PS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:132315:8oAAGB9BGLDAIriBnQsCj4IHgg1QACjK5BCWIMAcs1CUEpQFKvYNlmiLEj4KIHFEICgsYFQLEOQBSRB6gjBAoYGgQLsWHA4h

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffff7b00ff
Perceptual Hash:bc3c4746b61eb432
Difference Hash:c41a3a3c38b2f10c
Wavelet Hash:00dbcfcf8f1a00e7
Color Hash:#7997d2

Scan History

Scan history not available

Unable to load historical scan data