ScanMalware.com

Security Scan Report: vanifilms.com

Site favicon
Submitted: Oct 8, 2026, 8:42:11 PMCompleted: Oct 8, 2026, 8:43:19 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Old, self-branded film portfolio whose domain and a loaded resource match content-malware Indicators of Compromise; page issues EtherHiding (blockchain C2) and cloaking-script traffic — likely compromised, not a genuine attack site.

Risk Factors (6)
Content-malware Indicator of Compromise matching the primary domain (malware loader)
Content-malware Indicator of Compromise on a loaded third-party domain (zvh3.com, multi-feed)
Critical IDS malware alert for EtherHiding exfiltration
User-agent/URL beaconing to an external cloaking endpoint (seo-solutions.eu.cc)
Blockchain RPC traffic on a site with no legitimate web3 function
Site appears compromised/injected rather than intentionally malicious
Domain age information unavailable

Details

Page Title

Vani Films

Scan Type

public

Domain Name Analysis

Domain 'vanifilms.com' uses the commercial generic top-level domain (.com) with no subdomain. The second-level label 'vanifilms' is 9 characters long containing 3 vowels alongside 6 consonants. Breaking it apart gives 3 words: van, i, films. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://vanifilms.com

Page Load Overview

14.37s
Total Load Time
6.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:715 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media30% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16122.176.140.10Gurugram, Haryana, India
AS24560Bharti Airtel Ltd., Telemedia Services
12192.178.183.95Google · CDNUnited States
AS15169Google LLC
12142.251.110.94Google · CDNUnited States
AS15169Google LLC
12104.21.58.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12142.251.14.95Google · CDNUnited States
AS15169Google LLC
12104.26.12.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12142.251.20.94Google · CDNUnited States
AS15169Google LLC
12172.67.209.248Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12104.21.72.64Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1129--

Detected Technologies7

WordPressv7.1
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
LiteSpeed
40%
HTTP/3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1635408717E129472936F93CA9147B62D925DF00BCF03C6F4F7EC019D8AD6FA52286628

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:kiogsstxwso7b8C2AiJ64gJKHWtOyW8jUB5EXKG6J0FptdQ5kM:R5EJM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:306236:CMcIE6kEQP5MUIOlowMoEIBTSQUi5BHWAIlAiJjBIFl/GCFBCFBQojHYkKhUCTBBoQgBDbhKCRTeWQRXgYC0GYAAVmYTUCJC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0101010101011919
Perceptual Hash:8877dc8c738c738c
Difference Hash:0101010101113131
Wavelet Hash:01010101010139fd
Color Hash:#862d67

Other Hashes

Crop Resistant:b26949536b496db2,0101010101113331

Scan History

Scan history not available

Unable to load historical scan data