Security Scan Report: movista.ch

Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 7 domains to perform 112 HTTP transactions. The main domain is movista.ch and was registered 14 years ago.

Submitted URL: https://movista.ch

AI Security Verdict

High Risk

Confidence: 86%

8
Risk Score

Analyst-vetted kit roster and a CRITICAL YARA rule identify a ClickFix FakeCAPTCHA LOLBin payload on this page; the primary domain also carries an iClickFix malware threat-intel hit. Do not follow its 'verification' or download steps.

Risk Factors (4)
Known ClickFix FakeCAPTCHA (LOLBin variant) malicious kit detected on the page by analyst-vetted roster and a CRITICAL YARA rule
Threat-intel match on the primary domain naming it as iClickFix malware
Page presents fake 'device verification' steps designed to get visitors to execute a copied LOLBin command
No credential/payment form is present, so the risk is malware execution / social-engineering rather than credential theft
Domain age information unavailable

Details

Page Title

movista

Scan Type

public

Domain Name Analysis

The domain name 'movista.ch' uses the Swiss country-code top-level domain (.ch). Count 7 characters in 'movista' with three vowels and four consonants. Segmentation suggests 2 words: mo, vista. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://movista.ch

Page Load Overview

4.13s
Total Load Time
3.1 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:41%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:7,194 chars
Detector Agreement:67%
Language mismatch: Declared as en-US but detected as es

Website Classification

Primary Category

healthcare medical78% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
78%
real estate property
29%
social_media
25%
forum
25%
news/blog
20%

Detected Features

Search
Articles
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13160.153.0.66Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
11142.251.127.95Google · CDNUnited States
AS15169Google LLC
11104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1123.207.210.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
11142.251.20.94Google · CDNUnited States
AS15169Google LLC
11192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
1123.67.142.207Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
11142.251.13.95Google · CDNUnited States
AS15169Google LLC
11104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11142.251.14.94Google · CDNUnited States
AS15169Google LLC
11210--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17704C730B5A62479216F13EF9147230C24DBEFB7C69152F9F1FF422067A5C9439932AA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:HptuvvFqTF9QAncrKKv5S2v3hTbsm8+ONOWcOFDGpl7GoXzUFOLx:WqTFemKP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:189385:aBmAyECVZyA0SAh4pAhhYzQYxIgGgCCgAFT4aFPioSggoTkEiLGECEGIEAsCynR6aoUBIcmxXNEwIDGBKs1AWoAw+EkR4oZo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff070f05060808bf
Perceptual Hash:9aa6cdc8e4dbe016
Difference Hash:516d6d496c197967
Wavelet Hash:ff170f07060809ff
Color Hash:#8c40bf

Scan History

Scan history not available

Unable to load historical scan data