Security Scan Report: grishiv.com

Site favicon
Submitted: Oct 1, 2026, 1:36:08 PMCompleted: Oct 1, 2026, 1:36:57 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Legitimate-looking Grishiv Power stabilizer site that has been compromised: injected ClickFix 'Human Verification' overlay plus EtherHiding blockchain-RPC exfiltration, confirmed by roster kits, YARA and threat intel.

Risk Factors (5)
Known ClickFix Windows terminal/social-engineering kit injected into the page
EtherHiding malware exfiltration via blockchain RPC endpoint (rpc-mainnet.matic.quiknode.pro)
Injected fake Cloudflare 'Human Verification' overlay with fake Ray-ID styling
Threat-intel corroboration (2 independent feeds) against the primary domain and URL
Unranked third-party script host browseid.codes delivering JavaScript to the page
Domain age information unavailable

Details

Page Title

Servo Stabilizer Manufacturer In Ahmedabad Gujarat Grishiv Power – Leading Stabilizer Manufacturer In Ahmedabad Gujarat

Scan Type

public

Domain Name Analysis

Domain 'grishiv.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'grishiv' spans 7 characters holding two vowels versus five consonants. Tokenizing the label suggests 2 words: gris, hiv. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://grishiv.com/

Page Load Overview

10.57s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:4,925 chars
Detector Agreement:75%

Website Classification

Primary Category

corporate business88% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
88%
documentation technical
51%
adult content
49%
government public service
33%
education learning
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15172.67.201.161Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1474.125.29.95Google · CDNUnited States
AS15169Google LLC
14150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
14178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
14172.67.212.153Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14142.251.110.94Google · CDNUnited States
AS15169Google LLC
14104.21.36.253Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14104.21.61.177Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1138--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12B64F8A0B18631102317468EE2C97D18BA5EF395E84446F8F7FA411F8EF9D94B3A271D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:o2Q1A/kAqAhfA89Rhz9Rhz9Rhd0YLYQYlEGC+iGjCd2eELcmOs5XtT9/jVgzTNuj:NxPa89Rhz9Rhz9Rhd0YLYQYlEW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:317690:eJSSdahiYIkERQijPfFSDACVAYrtEaKwl0IYRAJGBA+QTMFHCqEAR7AAWpQfAbgCRojwTDREwPIoJeNQR0EWAYoQTmuipQgY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff9f818101ffff
Perceptual Hash:bd9ac3696c9249c3
Difference Hash:33363b3732339826
Wavelet Hash:ff9f9f000000cfd7
Color Hash:#acd279

Other Hashes

Crop Resistant:33363b3732339826

Scan History

Scan history not available

Unable to load historical scan data