Security Scan Report: epicglobalgroup.net

Site favicon
Submitted: Completed: publiccompleted
This website contacted 19 IPs in 3 countries across 14 domains to perform 133 HTTP transactions. The main domain is epicglobalgroup.net and was registered 9 years ago.

Submitted URL: https://epicglobalgroup.net

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate 9-year-old UK trades site that has been compromised: analyst-vetted IClickFix/EtherHiding loader, CRITICAL IDS malware alert and obfuscated blockchain-backed script. Do not load.

Risk Factors (4)
Known malicious kit (IClickFix / EtherHiding Sepolia loader) injected into the page, verified by analyst-vetted kit roster and hunting rule
CRITICAL IDS alert for EtherHiding malware exfiltration
Obfuscated JavaScript that resolves its next stage from a blockchain smart contract and contacts threat-feed-listed hosts
Primary domain flagged in threat intelligence as a malware loader; loaded third-party resource zvh3.com corroborated as iclickfix malware by two feeds
Domain age information unavailable

Details

Page Title

Electrician & Plumbing Services - Epic Global Group

Scan Type

public

Domain Name Analysis

Within the network infrastructure generic top-level domain (.net), 'epicglobalgroup.net' is registered with no subdomain. The second-level label 'epicglobalgroup' is 15 characters long holding 6 vowels versus 9 consonants. Word splitting yields 3 words: epic, global, group. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Be © Epic Global Group Limited] © We use cookies to ensure that we give you the best ex > O Eanes) jewel assume fat you are happy vil ‘you continue to use this

Page Load Overview

10.00s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-GB
Text Length:1,961 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical35% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
35%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
745.157.43.18United Kingdom
AS61323Ans Academy Limited
7142.251.14.95Google · CDNUnited States
AS15169Google LLC
7142.251.110.97Google · CDNUnited States
AS15169Google LLC
7157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
7142.251.155.119Google · CDNUnited States
AS15169Google LLC
7142.251.14.94Google · CDNUnited States
AS15169Google LLC
7192.178.183.94Google · CDNUnited States
AS15169Google LLC
7142.251.127.139Google · CDNUnited States
AS15169Google LLC
7216.239.34.36Google · CDNUnited States
AS15169Google LLC
7142.251.127.155Google · CDNUnited States
AS15169Google LLC
13319--

Detected Technologies14

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T159A3E673551924562A7B85D8A824B70CB54B9107CA8FCEE5B3FC12AC9BC4FE524F2B0D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:4uhN4zqJsr/AvtAsAafAoVCESSxl1FoNaoOGsXnCID0Mq1abNoCnIMDuib5WCSyH:42expcSS37oNagQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:106506:BQxBDwgQZCQhrxESg6gEIBQsJBRABhjIiVIwJwdIsgRYAoRDW0QYCAEQSoB5EjTWAgHwChoBAosYhhwAINpAQn5NgIZYCAAq

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:808099bdbd998184
Perceptual Hash:fffd006f02e900e9
Difference Hash:415171717171516d
Wavelet Hash:81819dbdbd9d8985
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data