Security Scan Report: homechefsecrets.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 1 country across 9 domains to perform 76 HTTP transactions. The main domain is homechefsecrets.com and was registered 1 month ago.

Submitted URL: https://homechefsecrets.com/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Throwaway domain cloning Google's Merchant Center page, carrying an analyst-vetted ClickFix kit that opens a fake Cloudflare check and delivers a Win+R command on click; primary domain flagged as malware C2 by three feeds. Do not interact.

Risk Factors (5)
Known malicious ClickFix phishing kit (analyst-vetted roster match) with clipboard/Win+R remote-command delivery
CRITICAL YARA rule match ClickFix_CF_Modal_Remote_Command_Builder
Primary domain flagged as nightshadec2 malware by 3 corroborating threat-intel feeds
Impersonation of Google brand and official Google Merchant Center content on a non-Google domain
Domain only 29 days old, unranked, with 0 legitimacy signals
Domain age information unavailable

Details

Page Title

Promote Your Business with Merchant Center - Google for Retail

Scan Type

public

Domain Name Analysis

Domain 'homechefsecrets.com' uses the commercial generic top-level domain (.com). The registrable portion 'homechefsecrets' spans 15 characters with five vowels and ten consonants. Word splitting yields three words: home, chef, secrets. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://homechefsecrets.com/

Page Load Overview

5.80s
Total Load Time
33.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:16,990 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping71% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
71%
technology software
67%
corporate business
44%
social media network
36%
documentation technical
26%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10154.29.74.181Ashburn, Virginia, United States
AS397423Tier.Net Technologies LLC
6192.178.183.138Google · CDNUnited States
AS15169Google LLC
6142.251.14.94Google · CDNUnited States
AS15169Google LLC
6142.251.13.94Google · CDNUnited States
AS15169Google LLC
6142.251.20.132Google · CDNUnited States
AS15169Google LLC
6142.251.155.119Google · CDNUnited States
AS15169Google LLC
6142.250.154.95Google · CDNUnited States
AS15169Google LLC
6142.251.127.84Google · CDNUnited States
AS15169Google LLC
6142.251.110.97Google · CDNUnited States
AS15169Google LLC
6192.178.183.139Google · CDNUnited States
AS15169Google LLC
7612--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D374B5A391F4103781639BD9F19B7F11F9B9D1A7C14E5085B9BC43EA0FA6D23A50BB08

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:nfwUORNlqU/JBnwY3McnmrilSa2o+C+j+GN7lMNXNc4Mi1Ay:fwUHril0ovmna71Ay

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:341895:LApmBL8hAAIcIM4hAleCGOUIxULEKEkGPCmmkAAHDNA6BYYakKAqFMQwBMSAxRYjgsIRQCCIhBgWCCovAgAAOEqMQwWqIDHa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff1f191b1b1f1ff
Perceptual Hash:ee1591c7975c1d42
Difference Hash:d007272565630743
Wavelet Hash:3ef111118131f1ff
Color Hash:#b6c587

Other Hashes

Crop Resistant:d007272565630743

Scan History

Scan history not available

Unable to load historical scan data