Security Scan: simon-steve.com

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9582895c-a4ec-403a-92f4-2ddb13989db5 Domain and IP registration (RDAP)/api/v1/rdap/9582895c-a4ec-403a-92f4-2ddb13989db5How often this domain was scanned/api/v1/domain/stats/simon-steve.com Scan history for this domain/api/v1/domain/history/simon-steve.com?limit=15

This website contacted 11 IPs in 1 country across 9 domains to perform 62 HTTP transactions. The main domain is simon-steve.com and was registered 6 months ago.

Submitted URL: https://simon-steve.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate-looking personal marketing page whose HTML has been compromised with a ClickFix/EtherHiding loader that pulls a malicious next stage from an Ethereum Sepolia contract; confirmed by kit roster and multiple CRITICAL ET MALWARE IDS alerts.

Risk Factors (5)

Known malicious ClickFix/EtherHiding kit injected into the HTML (analyst-vetted ground truth)

Multiple CRITICAL ET MALWARE IDS alerts for ClickFix domains and EtherHiding exfiltration

Obfuscated JavaScript that retrieves a second stage from an Ethereum Sepolia smart contract

Page loads third-party domain zvh4.com flagged as an exploit kit (clearfake) by three independent threat feeds

Primary domain itself carries a single-source 'unknown loader' malware report

Domain age information unavailable

Details

Page Title

simon-steve.com

Scan Type

public

Favicon Hash

MMH3: 1159016143

MD5: 34ebe5202bb368d357380e18bb9eba04

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'simon-steve.com' is registered while skipping any subdomain. The registrable portion 'simon-steve' spans 11 characters holding four vowels versus 6 consonants; bonus characters include one hyphen. It segments into 2 words: simon, steve. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

13.81s

Total Load Time

3.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:2,436 chars

Detector Agreement:100%

Website Classification

Primary Category

social media network58% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

social media network

58%

blog personal website

55%

finance banking

36%

documentation technical

32%

education learning

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	199.116.250.30	United States	AS46549Global Virtual Opportunities
5	71.40.109.121	San Antonio, Texas, United States	AS46549Global Virtual Opportunities
5	142.251.157.119Google · CDN	United States	AS15169Google LLC
5	142.251.14.94Google · CDN	United States	AS15169Google LLC
5	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
5	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.251.155.119Google · CDN	United States	AS15169Google LLC
5	142.251.150.119Google · CDN	United States	AS15169Google LLC
5	192.178.183.94Google · CDN	United States	AS15169Google LLC
62	11	-	-