Security Scan Report: oracle-epc.com

Submitted: Completed: publiccompleted
This website contacted 15 IPs in 3 countries across 11 domains to perform 152 HTTP transactions. The main domain is oracle-epc.com and was registered 3 years 12 months ago.

Submitted URL: https://oracle-epc.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Visible content is a legitimate-looking Nepal entrance-prep centre, but analyst-vetted ClearFake kit code (Polygon EtherHiding loader + rival-kit cleanup) is injected into the page — a compromised site serving a ClickFix malware chain. Do not interact.

Risk Factors (4)
Known malicious kit (ClearFake) injected into the page — analyst-vetted roster match
ClearFake Polygon contract loader (EtherHiding) present in HTML body
ClearFake rival-kit cleanup script that suppresses competing kits and blocks navigation
Compromised legitimate site used as a malware/ClickFix delivery vector for Windows visitors
Domain age information unavailable

Details

Page Title

Home - Oracle Entrance Preparation Center

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'oracle-epc.com' is registered while skipping any subdomain. The second-level label 'oracle-epc' is 10 characters long with 4 vowels and five consonants, plus one hyphen. Breaking it apart gives 3 words: oracle, ep, c. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

& 9851310118, 9801261113 info@oracle-epc.com ©) Kumaripati, Lalitpur 44600, Nepal @ondea ENTRANCE ABOUT COURSES 7 CSTE _ GALLERY NOTICES DOWNLOADS CONTACT Oracle Entrance PREPARATION CENTER Poem...

Page Load Overview

9.72s
Total Load Time
4.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,918 chars
Detector Agreement:75%

Website Classification

Primary Category

education learning57% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
57%
entertainment media
54%
corporate
35%
technology software
33%
documentation technical
33%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12103.235.199.20Nepal
AS4007Subisu Cablenet (Pvt) Ltd, Baluwatar, Kathmandu, Nepal
10142.251.110.95Google · CDNUnited States
AS15169Google LLC
10157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
10142.251.14.94Google · CDNUnited States
AS15169Google LLC
10142.251.156.4Google · CDNUnited States
AS15169Google LLC
10142.251.157.4Google · CDNUnited States
AS15169Google LLC
10142.251.150.4Google · CDNUnited States
AS15169Google LLC
10142.251.154.4Google · CDNUnited States
AS15169Google LLC
10142.251.153.4Google · CDNUnited States
AS15169Google LLC
10142.251.14.155Google · CDNUnited States
AS15169Google LLC
15215--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11244B7A07E971835312F13EF9057720C60A6DEF3D61AB2E5F4BB802552F4E9137E261A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:OZNVAR9e1AB6iEEvAFq1/CTTjZGVPosHYGkQeFp5jy79R3oBNnMocC0cI+/Fgy:TR98iTvAFq1/CTT3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:261010:hMANEICCIISQykVRXnhAUJIGSSjANZAwlgDAi5qoQAAggmDCUwBBgSoSgYKGESKBnQAwgAtlRAiAGgSEpEAIqR2L8qzAkZEk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c1ff1f1d39320101
Perceptual Hash:8af873766e1f2601
Difference Hash:3bb3f171e164dbcb
Wavelet Hash:c1ff1f1d39330b01
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data