Security Scan Report: sherrygideons.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 3 countries across 12 domains to perform 144 HTTP transactions. The main domain is sherrygideons.com and was registered 16 years ago.

Submitted URL: https://sherrygideons.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Genuine coaching site apparently compromised with an IClickFix/EtherHiding ClickFix loader: obfuscated script fetches a stage from a blockchain contract and contacts ClickFix host zvh4.com, with CRITICAL IDS malware alerts. Avoid.

Risk Factors (5)
Known malicious ClickFix/EtherHiding injection kit present on the page (compromised site)
CRITICAL IDS alerts for malware C2/exfiltration and ClickFix domain zvh4.com
Obfuscated JavaScript decoding to hidden blockchain RPC and threat-feed hosts
Threat-intel match on the primary domain as a malware loader
Page loads a third-party resource (zvh4.com) flagged as malicious by 3 feeds
Domain age information unavailable

Details

Page Title

Sherry Gideons | Human Behavior & Personal Development Specialist

Scan Type

public

Domain Name Analysis

Domain 'sherrygideons.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'sherrygideons' spans 13 characters holding four vowels versus nine consonants. Segmentation suggests three words: sherry, gideon, s. Median word length is six characters. No strong language cues emerged from the frequency lists.

Screenshot

{818-568-7769 &¥ info@sherrygideons.com HOME ABOUT ~ MEDIA& SPEAKING “ COACHING & COURSES “ BLOG PODCAST COMMUNITY ’ contact © Steps for Transforming to a Powerful Life WWW.SHERRYGIDEONS.COM TRANS...

Page Load Overview

16.49s
Total Load Time
5.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:8,185 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content28% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
28%
news/blog
20%

Detected Features

Search
Articles
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9192.185.36.124Ashburn, Virginia, United States
AS19871Network Solutions, LLC
9142.251.20.95Google · CDNUnited States
AS15169Google LLC
9104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.20.97Google · CDNUnited States
AS15169Google LLC
9142.251.13.139Google · CDNUnited States
AS15169Google LLC
923.10.249.152Akamai · CDNGlattbrugg, Zurich, Switzerland
AS20940Akamai International B.V.
9142.251.14.94Google · CDNUnited States
AS15169Google LLC
9146.75.120.84Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
9142.251.110.95Google · CDNUnited States
AS15169Google LLC
14416--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B8141AF6EA4C317A2356A298717A7B0CB2DAC033DA1386D1F2FE145C4795BD5229334E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:jh43FTBl5Plc+LVdokrUAGA1fAwqhlLRhUDNSS2qSGWWU7a/UtR7lMWLN7PbXdXh:9O91LmwqhlLRhUZSSzSGWHRj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:200260:hQA5SCICCiUGiIBAAmAoQgAmTIMgzygxSVMJR0UBalkFhCQUEICLYQK80ESMqJiAJMDKhI6dmA4BYaJMBBDKBBAAgRREUIaQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003c3c3c38381800
Perceptual Hash:8bde30e92732e433
Difference Hash:217369696bb3b9dd
Wavelet Hash:ff3c3c3c3c3d1c00
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data