Security Scan Report: mauricetalton.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 20 IPs in 2 countries across 11 domains to perform 133 HTTP transactions. The main domain is mauricetalton.com and was registered 4 years 11 months ago.

Submitted URL: https://mauricetalton.com

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Compromised fitness site serving a ClickFix kit: fake Cloudflare 'Human Verification' overlay with Win+X Terminal instructions and an EtherHiding blockchain loader; primary domain flagged as malware and critical IDS alerts confirm it.

Risk Factors (7)
Compromised legitimate-looking fitness site (mauricetalton.com, registered 2021) injecting a ClickFix fake-CAPTCHA overlay
Fake Cloudflare verification overlay impersonating Cloudflare branding and Ray ID
Instructions directing users to paste clipboard content into Windows Terminal/PowerShell (ClickFix malware delivery)
EtherHiding: next-stage payload address resolved from a Polygon smart contract via blockchain RPC (rpc-mainnet.matic.quiknode.pro)
Obfuscated script hiding threat-feed RPC hosts and loading code from unranked host browse-codes-enter.beer
Primary domain matched as malware ('clearfake') by two independent threat-intelligence feeds
CRITICAL Suricata IDS alerts for EtherHiding exfiltration and exploit-kit check-in traffic
Domain age information unavailable

Details

Page Title

mauricetalton.com – Fitnessother network

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'mauricetalton.com' is registered. Count 13 characters in 'mauricetalton' holding 6 vowels versus 7 consonants. It segments into 3 words: maurice, t, alton. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mauricetalton.com

Page Load Overview

4.25s
Total Load Time
11.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:5,924 chars
Detector Agreement:50%

Website Classification

Primary Category

healthcare medical28% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
28%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19141.193.213.11Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
696.125.171.41Ashburn, Virginia, United States
AS19871Network Solutions, LLC
6132.145.155.63Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
6142.251.154.4Google · CDNUnited States
AS15169Google LLC
6178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
6141.193.213.10Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
6142.251.152.4Google · CDNUnited States
AS15169Google LLC
6142.251.153.4Google · CDNUnited States
AS15169Google LLC
6142.251.157.4Google · CDNUnited States
AS15169Google LLC
6142.251.151.4Google · CDNUnited States
AS15169Google LLC
13320--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B3E372617A561839316F52CFC103660C60DBEFF7E661EAF5F6F31164A1B5CA036A32A0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:wQkyp8Ue2OqkWAzTmeTcZwpqnpM32w1eLQEGBIVjBiRex/C:wKilTmeTvqnpM32DLQEGuVcCC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:151788:PIEWTAAIxIa0ILACBSFmtoQBniAEA0oUSBkZUQMIAByojhhEIpQAAr8qhwCsJkgA4MbIgBawgHYCLJghEIoleQB4BwpShGwp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0f0d0c0f0e0f1f1f
Perceptual Hash:9973aca3d5acc2c4
Difference Hash:9e5999195879b334
Wavelet Hash:0f0d0d0f0f0f1f1f
Color Hash:#ac8053

Scan History

Scan history not available

Unable to load historical scan data