Security Scan Report: grillgastronomy.com

Site favicon
Submitted: Oct 4, 2026, 2:01:06 PMCompleted: Oct 4, 2026, 2:02:10 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Fake copy of Google's Merchant Center on a 24-day-old throwaway domain, carrying an analyst-vetted ClickFix kit that runs a remotely fetched Windows command on click; domain also flagged as nightshadec2 malware command-and-control. Do not interact.

Risk Factors (5)
Known malicious ClickFix kit detected on page (analyst-vetted ground truth)
CRITICAL YARA malware match: hidden fake Cloudflare verification modal that executes a fetched Win+R shell command
Primary domain flagged as nightshadec2 malware command-and-control by three independent threat feeds
Brand impersonation of Google Merchant Center on a mismatched, very new domain using Google's own titles, meta descriptions and og:site_name
Domain only 24 days old, unranked, and consistent with a documented cluster of throwaway cooking/grilling-named domains
Domain age information unavailable

Details

Page Title

Promote Your Business with Merchant Center - Google for Retail

Scan Type

public

Domain Name Analysis

The domain 'grillgastronomy.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'grillgastronomy' is 15 characters long split between 4 vowels and eleven consonants. Splitting it apart reveals 2 words: grill, gastronomy. Average segment length settles at 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://grillgastronomy.com/

Page Load Overview

5.46s
Total Load Time
33.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:17,113 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping71% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
71%
technology software
67%
corporate business
44%
social media network
36%
documentation technical
26%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15154.29.74.201Ashburn, Virginia, United States
AS397423Tier.Net Technologies LLC
5142.251.127.102Google · CDNUnited States
AS15169Google LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5142.251.20.132Google · CDNUnited States
AS15169Google LLC
5142.251.153.119Google · CDNUnited States
AS15169Google LLC
5142.251.20.95Google · CDNUnited States
AS15169Google LLC
5142.251.127.84Google · CDNUnited States
AS15169Google LLC
5192.178.183.97Google · CDNUnited States
AS15169Google LLC
5142.251.127.101Google · CDNUnited States
AS15169Google LLC
5142.251.156.119Google · CDNUnited States
AS15169Google LLC
8014--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F174B5A391F4103781639BD9F19B7F11F9B9D1A7C14E5085B9BC43EA0FA6D23A50BB08

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:EfwUORNlqU/JBnwY3McnmrilSa2tA+f+c+GN7lMNXNc4lt1AN:mwUHril0tAKlnar1AN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:341029:AymALgzeYhCgMGRgQCmdEABQAIQlwPaATzYCIyVBQgIKYEBSQLpJIEYuIqEFCqEKowSZMISHABLGAFgYLJEgSEeISIBSIgEg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff1f191b1b1f1ff
Perceptual Hash:ee1591c7955c1d62
Difference Hash:d007272565630743
Wavelet Hash:3ef111118131f1ff
Color Hash:#ac539f

Other Hashes

Crop Resistant:d007272565630743

Scan History

Scan history not available

Unable to load historical scan data