Security Scan Report: venunaturopathycentre.org

Site favicon
Submitted: Completed: publiccompleted
This website contacted 23 IPs in 4 countries across 16 domains to perform 153 HTTP transactions. The main domain is venunaturopathycentre.org and was registered 2 years ago.

Submitted URL: https://venunaturopathycentre.org

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate-looking naturopathy site that has been compromised: analyst-vetted IClickFix/EtherHiding kit is injected, with CRITICAL IDS malware alerts and corroborated malware Indicators of Compromise. Visitors should not load it.

Risk Factors (5)
Injected ClickFix / EtherHiding malicious script on the page (compromised content)
Obfuscated script hides known-malicious network hosts until decoded
Blockchain-based (Ethereum Sepolia) payload retrieval used to evade takedown
Multiple CRITICAL network IDS malware alerts tied to the page's TLS SNI and DNS traffic
Corroborated malware Indicators of Compromise on a resource the page loads
Domain age information unavailable

Details

Page Title

Home New - Venu Naturopathy Centre

Scan Type

public

Domain Name Analysis

Within the non-profit oriented generic top-level domain (.org), 'venunaturopathycentre.org' is registered. The second-level label 'venunaturopathycentre' is 21 characters long containing 8 vowels alongside 13 consonants. Word splitting yields 6 words: ven, u, natur, opa, thy, centre. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

© Monday-Saturday:5:30 AMto 5:00PM &, +917065060266 Naropethy BEGIN YOUR HEALTH JOURNEY Traditional Therapies. Modern < Care. Timeless Healing. At Venu Naturopathy Centre, we blend proven traditi...

Page Load Overview

7.67s
Total Load Time
4.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:12,684 chars
Detector Agreement:75%

Website Classification

Primary Category

healthcare medical54% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
54%
corporate
25%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21194.163.177.80Lauterbourg, Grand Est, France
AS51167Contabo GmbH
6142.251.14.95Google · CDNUnited States
AS15169Google LLC
6142.251.151.119Google · CDNUnited States
AS15169Google LLC
623.50.131.11Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
6142.251.20.94Google · CDNUnited States
AS15169Google LLC
6142.251.157.4Google · CDNUnited States
AS15169Google LLC
6150.171.109.107Azure · CLOUDUnited States
AS8075Microsoft Corporation
635.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
6142.251.156.119Google · CDNUnited States
AS15169Google LLC
6188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15323--

Detected Technologies12

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B064D8617D4B683A322F13CFA00B660C629BDEEAE65595F5F1B30125E2F1CD037D21A9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:MRdV14ThK3D2DFn3K5luDT/vtwHHOsImlVZccPkU/MszoZ1++Oco:MRdV14Thu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:326113:YBlNDE8RRILJDiJClOIAcFBInAHALpzLJMoRAl8tQiESpwSBoKIKwD2g8GDkUzeSegRES0EkJdASmhyfIrgEExFlgEWkIeCC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff01010101ffffff
Perceptual Hash:a92ad6d999d6d601
Difference Hash:79278f8b9b598e0e
Wavelet Hash:ff00000000ffffff
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data