Security Scan Report: celetalkies.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 2 countries across 7 domains to perform 64 HTTP transactions. The main domain is celetalkies.com and was registered 9 months ago.

Submitted URL: https://celetalkies.com/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Fake Cloudflare bot-check page that copies a PowerShell/shell command to the clipboard and tells users to paste it into Win+R — ClickFix-style malware delivery backed by critical EtherHiding network alerts. Do not paste; leave immediately.

Risk Factors (6)
Clipboard shell-command injection (pastejacking) used for malware delivery
Critical ET MALWARE EtherHiding Exfil M2 IDS alerts
Impersonation of a Cloudflare bot-verification challenge
Unranked domain with unknown registration age
Obfuscated/obfuscating multi-hop redirect chain (6 cross-domain redirects)
Threat-intel malware association on the primary URL
Domain age information unavailable

Details

Page Title

celetalkies.com -

Scan Type

public

Domain Name Analysis

Domain 'celetalkies.com' uses the commercial generic top-level domain (.com). The core label 'celetalkies' covers 11 characters with five vowels and six consonants. Segmentation suggests three words: ce, le, talkies. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://celetalkies.com/

Page Load Overview

1.93s
Total Load Time
392 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,531 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software81% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
81%
documentation technical
67%
government public service
51%
phishing scam
48%
news media journalism
40%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14172.67.193.217Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.16.56.10Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.21.60.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.16.57.10Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
53.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
534.111.175.102Google · CDNKansas City, Missouri, United States
AS396982Google LLC
5172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
515.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
587.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
587.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
6411--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C0B3B772B960103A35DB43BDA215B2663F79B137D306DAE5B9ECB160CFC52EB586120C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:hzOypfprVXYhZoWkwTP29VZ5EkBEIPQjhFOkvJHr2ZCOi3FA+RNSndSMPUJ7i:hzn5WZoWs0FA+jSnUDe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:117236:WgMaCzCUEAcBYCRSRU48IVBuX3sIECAS4Zm4kHB20UoAXCAAEEgvAhiAgDBlBjUSxB0hBBQgDLimfB4AaQELYGBEp4qYIMOA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cec2c2fefefeffe7
Perceptual Hash:b13830cec7cec6c6
Difference Hash:129a16120202100c
Wavelet Hash:3a020e0efcfcd7c2
Color Hash:#4fbf40

Other Hashes

Crop Resistant:129a16120202100c

Scan History

Scan history not available

Unable to load historical scan data