Security Scan Report: aureoforpet.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 23 IPs in 3 countries across 16 domains to perform 226 HTTP transactions. The main domain is aureoforpet.com and was registered 2 years 3 months ago.

Submitted URL: https://aureoforpet.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate-looking Japanese pet supplement site whose page is compromised with an EtherHiding ClickFix loader: obfuscated scripts fetch next-stage payload addresses from a Polygon contract and serve a fake 'Human Verification' Terminal overlay. Do not interact.

Risk Factors (5)
Compromised page serving a ClickFix fake 'Human Verification' overlay that instructs Windows users to open Terminal and run commands
EtherHiding loader: next-stage payload address retrieved from a blockchain contract
Primary domain flagged as malware ('iclickfix') in threat intelligence
Obfuscated JavaScript concealing known-attacker RPC hosts
Multi-source malicious 'ek clearfake' host loaded as a page resource
Domain age information unavailable

Details

Page Title

Love for pet

Scan Type

public

Domain Name Analysis

Domain 'aureoforpet.com' uses the commercial generic top-level domain (.com) without a subdomain. The second-level label 'aureoforpet' is 11 characters long split between six vowels and 5 consonants. It segments into four words: aure, of, or, pet. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://aureoforpet.com

Page Load Overview

13.43s
Total Load Time
4.5 MB
Total Size

Language Analysis

Primary Language

🇯🇵Japanese
Code: ja
Confidence:80%
Script:Mixed
Direction:ltr

Detection Details

HTML Lang Attribute:ja
Text Length:2,423 chars
Detector Agreement:67%

Website Classification

Primary Category

healthcare medical89% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
89%
government public service
27%
news/blog
20%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
28187.53.137.160Kuala Lumpur, Kuala Lumpur, Malaysia
AS47583Hostinger International Limited
9142.251.14.95Google · CDNUnited States
AS15169Google LLC
935.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
9188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.14.94Google · CDNUnited States
AS15169Google LLC
9178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
9104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.151.4Google · CDNUnited States
AS15169Google LLC
9142.251.157.4Google · CDNUnited States
AS15169Google LLC
22623--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F3548123A3B00B3F639E35C9E011771B91D3D707D660A7FAF7A281EDE568C812867625

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:dXhGVA2QAIAiBArAquQ8/pubS+YFmPPNYNGTm3g3N+OAzuoiPAb+B/mRjmaG6WDx:DDyN7EpronjFJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:291789:gCwAJCkYmOIkgoaBMmQIBlB0MAYlGDAMByoBJcRUBKBQUhggcE7BAtkgwclKEBKiIAbBLQeICgBZAERSMDBtCyZNAQTIAAYg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f7ff81918181ffff
Perceptual Hash:ef16906a4c873b78
Difference Hash:4f4f2b633323868e
Wavelet Hash:00ff81818181ffff
Color Hash:#4fbf40

Scan History

Scan history not available

Unable to load historical scan data