Security Scan: Violet Heart

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e1776f3c-998e-4d4a-9d3f-a84171265531 Domain and IP registration (RDAP)/api/v1/rdap/e1776f3c-998e-4d4a-9d3f-a84171265531How often this domain was scanned/api/v1/domain/stats/violetheartmusic.com Scan history for this domain/api/v1/domain/history/violetheartmusic.com?limit=15

This website contacted 24 IPs in 3 countries across 17 domains to perform 246 HTTP transactions. The main domain is violetheartmusic.com and was registered 14 years ago.

Submitted URL: https://violetheartmusic.com

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Compromised music site now serving a ClickFix clipboard-injection lure plus EtherHiding malware: payoad addressed via BSC contracts, EtherHiding IDS alerts, PowerShell paste instructions. Do not paste, run, or share anything from this page.

Risk Factors (6)

Clipboard shell-injection (ClickFix) hiding behind a fake security-verification overlay

Blockchain-based payload retrieval (EtherHiding) from Binance testnet RPC endpoints

Threat-intel-flagged hosts embedded in obfuscated script (known attacker, Vidar malware)

20 CRITICAL IDS alerts for EtherHiding exfiltration

Manual PowerShell paste-and-run instruction shown to end users

Seven cross-domain redirects in the capture chain

Domain age information unavailable

Details

Page Title

Violet Heart

Scan Type

public

Favicon Hash

MMH3: -1117438647

MD5: b48ec86997cb3c5af932228de8683f60

Domain Name Analysis

The domain name 'violetheartmusic.com' uses the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'violetheartmusic' spans 16 characters split between 7 vowels and 9 consonants. Segmentation suggests 3 words: violet, heart, music. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

33.55s

Total Load Time

2.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:4,978 chars

Detector Agreement:67%

Website Classification

Primary Category

news/blog70% confidence

Type: spa

Method: structural

All Detected Categories

news/blog

70%

Detected Features

Articles

OG: article

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
16	104.198.217.163Google · CDN	Council Bluffs, Iowa, United States	AS396982Google LLC
10	141.193.213.11Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
10	192.0.76.3	San Francisco, California, United States	AS2635Automattic, Inc
10	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
10	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
10	35.71.129.99Aws · CLOUD	United States	AS16509Amazon.com, Inc.
10	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
10	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
246	24	-	-