Security Report: markgoldman.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8bd57705-cec4-4591-afd5-e443a0dfafad Domain and IP registration (RDAP)/api/v1/rdap/8bd57705-cec4-4591-afd5-e443a0dfafadHow often this domain was scanned/api/v1/domain/stats/markgoldman.com Scan history for this domain/api/v1/domain/history/markgoldman.com?limit=15

This website contacted 28 IPs in 2 countries across 19 domains to perform 98 HTTP transactions. The main domain is markgoldman.com and was registered 27 years ago.

Submitted URL: https://markgoldman.com

AI Security Verdict

High Risk

Confidence: 92%

Risk Score

Legitimate 27-year-old mortgage site that appears compromised: an analyst-vetted IClickFix/EtherHiding ClickFix loader is injected, with a CRITICAL IDS malware alert and hidden blockchain-RPC payload retrieval. No forms, but do not browse or click prompts here.

Risk Factors (5)

Compromised site injecting the IClickFix ClickFix/EtherHiding loader — visitors may be shown a fake verification overlay that tricks them into running malware

Decoded, obfuscated JavaScript hides known-attacker hosts (0xrpc.io, 1rpc.io, gateway.tenderly.co)

Blockchain-contract-based payload retrieval (EtherHiding) used to evade takedown

Critical IDS malware detection on traffic associated with the page

Primary domain itself carries a malware ('loader') threat-intel report, albeit single-source

Domain age information unavailable

Details

Page Title

Mark H. Goldman – Specializing in Southern California Real Estate Financing

Scan Type

public

Favicon Hash

MMH3: 1801024942

MD5: bb0deffc991750b89584b9f8cebf64eb

Domain Name Analysis

You're looking at domain 'markgoldman.com' on the commercial generic top-level domain (.com) with no subdomain. The second-level label 'markgoldman' is 11 characters long with 3 vowels and 8 consonants. It segments into 2 words: mark, goldman. The median word length lands at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

> loanguy@markgoldmar Mark Goldman CD £Panciat (858) 487-1875 ABOUT MARK IN THE NEWS SERVICES ~ RESOURCES ~ MORTGAGE BASICS ~ CONTACT US mo le Home Loan Expertise & Personalized Service Whether...

Page Load Overview

5.38s

Total Load Time

4.9 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:3,780 chars

Detector Agreement:87%

All Detected Languages

🇺🇸en(97%)🇮🇹it(1%)🇵🇭tl(1%)🇪🇸ca(1%)

Website Classification

Primary Category

real estate property93% confidence

Type: spa

Method: ml+structural

All Detected Categories

real estate property

93%

news media journalism

42%

adult content

42%

finance banking

28%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
60	69.55.235.124	United States	AS22489Castle Access Inc
3	142.251.14.95Google · CDN	United States	AS15169Google LLC
3	172.66.147.250Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
3	18.66.122.38Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	142.251.156.4Google · CDN	United States	AS15169Google LLC
3	192.178.183.94Google · CDN	United States	AS15169Google LLC
3	104.20.47.8Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.21.72.64Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	18.66.122.127Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
98	28	-	-