Security Scan Report: e-mobilitysearch.com

Submitted: Oct 14, 2026, 8:43:10 PMCompleted: Oct 14, 2026, 8:43:54 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate recruitment domain, evidently compromised and serving an injected ClickFix/EtherHiding malware loader: CRITICAL YARA kit hits, CRITICAL IDS malware alerts, and a two-feed malware flag on the primary domain. Do not interact.

Risk Factors (7)
ClickFix WinX overlay malware kit injected into the page (blockchain-hosted loader)
EtherHiding: script retrieves its next-stage address from a blockchain contract
CRITICAL IDS alerts for malware exfiltration and exploit-kit cluster check-in
Primary domain flagged as malware ('clearfake') by two independent threat feeds
Threat-feed hosts hidden inside obfuscated JavaScript
Off-topic gambling spam text injected into the site content
Unranked third-party script host (browse-codes-enter.beer) contacted by page scripts
Domain age information unavailable

Details

Page Title

E-Mobility Search | Leaders In Technology Talent Acquisition

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'e-mobilitysearch.com' is registered without a subdomain. The registrable portion 'e-mobilitysearch' spans 16 characters split between 6 vowels and nine consonants, plus 1 hyphen. It segments into 3 words: e, mobility, search. Median word length comes out to six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://e-mobilitysearch.com

Page Load Overview

0.34s
Total Load Time
4.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-GB
Text Length:5,520 chars
Detector Agreement:80%

Website Classification

Primary Category

documentation technical59% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
59%
corporate
35%
news/blog
20%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20194.1.147.48Manchester, England, United Kingdom
AS210250K Media Tech Ltd.
6192.178.183.95Google · CDNUnited States
AS15169Google LLC
6104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.156.119Google · CDNUnited States
AS15169Google LLC
6172.66.133.124Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.13.94Google · CDNUnited States
AS15169Google LLC
6192.178.183.94Google · CDNUnited States
AS15169Google LLC
6104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
6188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11016--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A804E7623D461426122F16CF600B370DA4DA9ECADA03D8D5F3FE529897F5CD17BA2A0D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:WSV17rr3uBurubS+CwH/swEkbKBZ0Bn9G4mb3nH9g5:Wemv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:180794:gUlPGAAzkEC4AZLMEHcFRaH8AREgRFoC6CQFjBvAMjkDNepQcQfQIEWoGJIAo1yhJujUAMCIKLCfnjUCZiCJMAIkkTmiCsJg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000010000008ffff
Perceptual Hash:c444f51f36cc49ec
Difference Hash:228291e4a4290004
Wavelet Hash:1040782010ffffff
Color Hash:#87c5a9

Other Hashes

Crop Resistant:228291e4a4290004

Scan History

Scan history not available

Unable to load historical scan data