Security Scan Report: ceenux.com

Redirected to:
https://www.ceenux.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 5 countries across 20 domains to perform 92 HTTP transactions. The main domain is ceenux.com and was registered 6 years ago.

Submitted URL: https://ceenux.com

Effective URL:
https://www.ceenux.com/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate-looking marketing agency site whose pages are compromised with an ErrTraffic/Exvicy ClickFix injection: a fake Cloudflare human-verification overlay pushes visitors to paste Terminal commands, with payload host resolved via blockchain EtherHiding. Do not interact.

Risk Factors (6)
Known malicious ClickFix / ErrTraffic-Exvicy kit injected into the page (roster-anchored, CRITICAL)
Fake Cloudflare 'Human Verification' overlay instructing users to run Terminal commands (Win+X, Ctrl+V, Enter)
EtherHiding: next-stage payload host fetched from a Polygon smart contract via obfuscated JavaScript
CRITICAL IDS alerts for EtherHiding exfiltration and ErrTraffic exploit-kit check-in
Site loads third-party script hosts with no reputation, one of which is flagged as an IClickFix host (codes.browse-cdn.beer)
Domain reputation feeds flag ceenux.com itself as 'iclickfix' malware
Domain age information unavailable

Details

Page Title

Ceenux Marketing Agency — Partnering for Business Growth

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'ceenux.com' is registered with no subdomain. Count 6 characters in 'ceenux' with three vowels and three consonants. It segments into three words: cee, nu, x. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ceenux.com

Page Load Overview

75.14s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,712 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate business48% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
48%
corporate
35%
documentation technical
27%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
751.161.122.78Canada
AS16276OVH SAS
5142.251.13.95Google · CDNUnited States
AS15169Google LLC
5188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.250.154.94Google · CDNUnited States
AS15169Google LLC
5193.178.159.12Roubaix, Hauts-de-France, France
AS218974Ufo Technologies Limited
5158.94.208.87Frankfurt am Main, Hesse, Germany
AS6461Zayo Bandwidth
52.27.5.107United States
AS202226Great Flower
595.163.244.135Russia
AS197695Domain names registrar REG.RU, Ltd
5142.251.20.95Google · CDNUnited States
AS15169Google LLC
9218--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T112C307317695197A202F0FCBE066730D30DAD6DBDA424AE5F1F21221E3F9CA535E7268

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:GJoap1MO+o163Wvx3XjEoQndFJ6e1WHjCl3sbqUqSRSLUuAzmp:+RvxnjEoQndFh4rqUqSRSQuAza

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:127359:L4gYGiKRFFNCKBQUjKEFRORYSSCwkZVqCjQAKVBQWACBAcRFggg4lCMASLiYqIUoKYEOqdKhYk0SNDREKymClFBMIFhDS4iK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00f64fcfbfdf477f
Perceptual Hash:917544de4771398e
Difference Hash:84a49b1a6a1884c0
Wavelet Hash:007c4e5e7e5e7f00
Color Hash:#e06cd0

Other Hashes

Crop Resistant:84a49b1a6a1884c0

Scan History

Scan history not available

Unable to load historical scan data