Security Scan: Hyderabad Wedding Photography: RVRPRO Studio

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e75834f1-a443-448a-9dda-08a0982574c6 Domain and IP registration (RDAP)/api/v1/rdap/e75834f1-a443-448a-9dda-08a0982574c6How often this domain was scanned/api/v1/domain/stats/rvrpro.in Scan history for this domain/api/v1/domain/history/rvrpro.in?limit=15

This website contacted 12 IPs in 2 countries across 11 domains to perform 219 HTTP transactions. The main domain is rvrpro.in and was registered 13 years ago.

Submitted URL: https://rvrpro.in

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate Hyderabad wedding-photography site whose page has been compromised with an injected ClickFix fake 'Human Verification' overlay (Windows Win+X Terminal paste) and EtherHiding blockchain-RPC payload retrieval. Do not interact; never paste the shown commands.

Risk Factors (6)

Injected ClickFix social-engineering overlay that walks visitors through pasting attacker-supplied commands into the Windows Terminal/Command Prompt

CRITICAL YARA hit for the ClickFix WinX overlay kit (roster-anchored, analyst-vetted)

CRITICAL IDS alerts for EtherHiding exfiltration and ClickFix C2 domains (gateway.tenderly.co)

Primary domain rvrpro.in reported as an 'unknown loader (malware)' in threat intelligence

Blockchain RPC connections (polygon.gateway.tenderly.co, rpc.ankr.com) consistent with EtherHiding payload retrieval

Third-party malicious resource checkyoubrowse.codes flagged by two independent feeds

Domain age information unavailable

Details

Page Title

Hyderabad Wedding Photography: RVRPRO Studio

Scan Type

public

Favicon Hash

MMH3: 2120484271

MD5: 722a1ff4ed06bed7662cf130afc75ee4

Domain Name Analysis

The domain 'rvrpro.in' uses the Indian country-code top-level domain (.in) and has no subdomain. The second-level label 'rvrpro' is 6 characters long with one vowel and five consonants. Splitting it apart reveals three words: rv, r, pro. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

11.69s

Total Load Time

32.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:5,030 chars

Detector Agreement:60%

Website Classification

Primary Category

entertainment media64% confidence

Type: spa

Method: ml+structural

All Detected Categories

entertainment media

64%

social_media

25%

forum

25%

e-commerce

20%

Detected Features

Products

Comments

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
21	104.21.81.185Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
18	142.251.110.95Google · CDN	United States	AS15169Google LLC
18	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
18	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
18	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
18	172.67.163.98Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
18	142.251.20.95Google · CDN	United States	AS15169Google LLC
18	162.159.128.61Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
18	162.159.138.60Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
18	146.75.120.217Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
219	12	-	-