ScanMalware.com

Security Scan Report: simplenutrition.com.au

Submitted: Sep 16, 2026, 10:47:34 PMCompleted: Sep 16, 2026, 10:47:59 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 86%

8
Risk Score

Likely compromised nutrition-clinic site serving EtherHiding-style malware: CRITICAL IDS malware alert, blockchain RPC traffic, and malware Indicators of Compromise on the domain. Do not visit.

Risk Factors (5)
CRITICAL Suricata malware alert (EtherHiding exfiltration) on page traffic
Blockchain RPC domain (gateway.tenderly.co) contacted from the page — typical of blockchain-abused C2
Content-malware Indicator of Compromise on the primary domain (rat) and on a loaded external resource (iclickfix)
Suspicious third-party script/domains injected into otherwise static health-clinic page (xaz2.com, breakdancelibrary.com)
Crypto API usage in inline script on a nutrition site with no legitimate need for it
Domain age information unavailable

Details

Page Title

Simple Nutrition

Scan Type

public

Domain Name Analysis

You're looking at domain 'simplenutrition.com.au' on the Australian country-code top-level domain (.com.au) while skipping any subdomain. The second-level label 'simplenutrition' is 15 characters long with 6 vowels and nine consonants. Breaking it apart gives two words: simple, nutrition. Expect 7.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://simplenutrition.com.au

Page Load Overview

5.34s
Total Load Time
257 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,340 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical99% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

healthcare medical
99%
government public service
95%
blog personal website
91%
education learning
90%
adult content
87%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
845.76.114.66Sydney, New South Wales, Australia
AS20473The Constant Company, LLC
535.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
5172.67.203.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
234--

Detected Technologies4

WordPress
95%
PHP
50%
MySQL
50%
HTTP/3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12432F871839639D42E6CEA01BBF7B96C0646A83B043379D7C10F2D8D2A3A4DB9145DA3

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:P4dlXbDN6BMD+gkdJfVzf4sJ2HQn/xE6oAi5a8zlvg/dP/xB/nkWHHDZUs:gd9fNwMKDfNQ62Ho/xE6x4aUg/5j/nfd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11169:QEEQQIPTAgMGkXxRasiApB1WUAxIHBcR4EDLBbDDBRAAUBRRABSLBEIBMSSIECHUAYZ5qUI2CoACYIACpEECDgOrK1TQARle

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffff7f7f7ff0000
Perceptual Hash:ecb41bc96d42b62c
Difference Hash:2b3c242e2734a121
Wavelet Hash:dbff87d3938f0000
Color Hash:#1f936d

Other Hashes

Crop Resistant:2b3c242e2734a121,80a084a821142020

Scan History

Scan history not available

Unable to load historical scan data