Security Report: engratitud.com.izi.xjw.temporary.site - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/749b337e-7905-4006-96e9-637a6ad879c3 Domain and IP registration (RDAP)/api/v1/rdap/749b337e-7905-4006-96e9-637a6ad879c3How often this domain was scanned/api/v1/domain/stats/engratitud.com.izi.xjw.temporary.site Scan history for this domain/api/v1/domain/history/engratitud.com.izi.xjw.temporary.site?limit=15

This website contacted 8 IPs in 3 countries across 6 domains to perform 83 HTTP transactions. The main domain is temporary.site and was registered 3 years 2 months ago.

Submitted URL: https://engratitud.com.izi.xjw.temporary.site

The Cisco Umbrella rank of the primary domain is #244,706 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised e-commerce site carrying an analyst-confirmed ClickFix kit: a fake Cloudflare 'Human Verification' overlay tricks Windows users into pasting Terminal commands, loaded via a blockchain contract. Do not interact.

Risk Factors (5)

Injected ClickFix 'Human Verification' overlay impersonating Cloudflare branding and a Ray ID

Social engineering instructing Windows users to open Terminal and paste attacker-supplied clipboard commands (PowerShell execution)

Blockchain/EtherHiding loader resolving overlay infrastructure via Polygon smart contract RPC calls

Threat-intel matches on the primary domain and loaded resources (iclickfix/malware, IClickFix, ek clearfake-1)

Legitimate Spanish e-commerce page ('En Gratitud' gratitude products) used as a compromised host for the injected kit

Domain age information unavailable

Details

Page Title

Inicio - En Gratitud

Scan Type

public

Favicon Hash

MMH3: -1364318264

MD5: 11ebc2d57cdcc558085a5a15980c0193

Domain Name Analysis

The domain 'engratitud.com.izi.xjw.temporary.site' uses the .site top-level domain with subdomain 'engratitud.com.izi.xjw'. The core label 'temporary' covers 9 characters with three vowels and six consonants. It segments into 1 word: temporary. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.24s

Total Load Time

2.4 MB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:1,508 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical63% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical

63%

technology software

44%

corporate

35%

cryptocurrency blockchain

35%

e-commerce

20%

Detected Features

Products

OG: article

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	50.6.253.89	Ashburn, Virginia, United States	AS31898Oracle Corporation
10	151.101.193.229Fastly · CDN	United States	AS54113Fastly, Inc.
10	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	64.130.32.46	Frankfurt am Main, Hesse, Germany	AS20326TeraSwitch Networks Inc.
10	31.77.16.64	Amsterdam, North Holland, Netherlands	AS219337Fzco
10	151.101.65.229Fastly · CDN	United States	AS54113Fastly, Inc.
10	172.64.147.103Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	104.18.40.153Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
83	8	-	-