Security Scan Report: mastermenchefs.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 1 country across 9 domains to perform 82 HTTP transactions. The main domain is mastermenchefs.com and was registered 1 month ago.

Submitted URL: https://mastermenchefs.com/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Confirmed malicious: 30-day-old domain clones Google Merchant Center and serves an anchor-vetted ClickFix kit (YARA-confirmed) that copies a remote command to the clipboard; domain also flagged as nightshadec2 malware by 3 feeds.

Risk Factors (5)
Known malicious ClickFix phishing kit served from the page (analyst-vetted roster AND YARA hit)
Multi-source corroborated malware indicator-of-compromise on the primary domain (3 feeds, nightshadec2 C2 family)
Impersonation of Google Merchant Center branding on a domain that is not Google's
Domain only 30 days old, unranked in Cisco Umbrella
Hidden click-triggered fake verification modal that silently writes an attacker-supplied command to the clipboard
Domain age information unavailable

Details

Page Title

Promote Your Business with Merchant Center - Google for Retail

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'mastermenchefs.com' is registered. The registrable portion 'mastermenchefs' spans 14 characters holding 4 vowels versus ten consonants. Segmentation suggests three words: master, men, chefs. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mastermenchefs.com/

Page Load Overview

7.19s
Total Load Time
33.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:17,113 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping71% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
71%
technology software
67%
corporate business
44%
social media network
36%
documentation technical
26%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1238.134.148.172Clifton, New Jersey, United States
AS174Cogent Communications, LLC
5142.251.127.100Google · CDNUnited States
AS15169Google LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5142.250.154.132Google · CDNUnited States
AS15169Google LLC
5192.178.183.97Google · CDNUnited States
AS15169Google LLC
5142.251.150.119Google · CDNUnited States
AS15169Google LLC
5192.178.183.95Google · CDNUnited States
AS15169Google LLC
5142.251.127.84Google · CDNUnited States
AS15169Google LLC
5192.178.183.101Google · CDNUnited States
AS15169Google LLC
5142.251.13.94Google · CDNUnited States
AS15169Google LLC
8215--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10F74B5A391F4103781639BD9F19B7F11F9B9D1A7C14E5085B9BC43EA0FA6D23A50BB08

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:EfwUORNlqU/JBnwY3McnmrilSa2v+/+w+GN7lMNXNc4zy1Am:mwUHril0vadnae1Am

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:342059:QQQY0IeCQQSUBSSFEUSEOJHQZDIIyPIBctBzHPYDgzsAgqQEFVtiEAGAQyEEQsqEBBCqBZTEY4IQIKAPAwAgIgPISiKICGAC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff1f191b1b1f1ff
Perceptual Hash:ee1591c7955c1d62
Difference Hash:d007272565630743
Wavelet Hash:3ef111118131f1ff
Color Hash:#785b3a

Other Hashes

Crop Resistant:d007272565630743

Scan History

Scan history not available

Unable to load historical scan data