Security Scan Report: gautamize.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 25 IPs in 4 countries across 17 domains to perform 178 HTTP transactions. The main domain is gautamize.com and was registered 1 year 7 months ago.

Submitted URL: https://gautamize.com/

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Legitimate-looking agency site appears compromised: analyst-vetted Macfinger ClickFix/AMOS stealer kit and CRITICAL AMOS/EtherHiding IDS alerts on this page. Do not visit.

Risk Factors (5)
Analyst-vetted CRITICAL stealer kit (Macfinger ClickFix / AMOS) injected into the page HTML
CRITICAL IDS alerts for AMOS ClickFix loader request and EtherHiding exfiltration
External *.top attacker domain (ironphantomcore.top) and Ethereum RPC domain (0xrpc.io) contacted by the page
Site is likely compromised, so ordinary visitors would receive the malicious payload from a trusted-looking domain
Captured DOM was a bot-protection wall, so script behaviour could not be fully observed
Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Domain Name Analysis

Domain 'gautamize.com' uses the commercial generic top-level domain (.com) and has no subdomain. The core label 'gautamize' covers 9 characters containing five vowels alongside four consonants. Splitting it apart reveals 2 words: gautam, ize. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://gautamize.com/

Page Load Overview

0.33s
Total Load Time
3.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:10,153 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business59% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
59%
social media network
43%
corporate
35%
e-commerce shopping
33%
blog personal website
31%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1092.113.23.98Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
792.113.23.113Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
7142.251.14.95Google · CDNUnited States
AS15169Google LLC
7142.251.20.94Google · CDNUnited States
AS15169Google LLC
792.113.16.38Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
777.110.106.83Paris, Île-de-France, France
AS210644Aeza Group LLC
7142.251.14.97Google · CDNUnited States
AS15169Google LLC
7104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.20.155Google · CDNUnited States
AS15169Google LLC
7142.251.127.84Google · CDNUnited States
AS15169Google LLC
17825--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D524F933B8561826229B41C7D0A3339C60A7C7ABDA1294F9F5BE513C57F2CE23697264

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:PNAPcArlAdA7AjCJv+iehafTASJEyRAF7rPBzf09Xst6JzXst6OsXst6lNXst6YX:PKa2UJakSJEyRAF/PBzWtjfMPInn0XjP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:221285:EjLImEpYhHkA4UTdBgghU1QJSFQwJpBAACpQCCQKALPVQDJTAnFhh3JUgYFIqgOi2RNDY/EJdCQkkLOBoojzAYKIugUQRuYp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:feff87c3c1ffffe7
Perceptual Hash:b03cc7cd7198366c
Difference Hash:00003c1a0200000c
Wavelet Hash:0e0e020e80fefec2
Color Hash:#532dd2

Other Hashes

Crop Resistant:00003c1a0200000c

Scan History

Scan history not available

Unable to load historical scan data