Security Report: gentlemensmechanical.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a5c71fd8-0c60-4aad-8ef7-324de36b76e6 Domain and IP registration (RDAP)/api/v1/rdap/a5c71fd8-0c60-4aad-8ef7-324de36b76e6How often this domain was scanned/api/v1/domain/stats/gentlemensmechanical.com Scan history for this domain/api/v1/domain/history/gentlemensmechanical.com?limit=15

This website contacted 5 IPs in 1 country across 6 domains to perform 21 HTTP transactions. The main domain is gentlemensmechanical.com and was registered 3 years 11 months ago.

Submitted URL: https://gentlemensmechanical.com

AI Security Verdict

Confirmed Scam

Confidence: 94%

Risk Score

Legitimate HVAC site that has been compromised: obfuscated EtherHiding/ClickFix loader (analyst-vetted kit, 5 critical IDS alerts) pulls a malware stage from a blockchain contract. Do not browse.

Risk Factors (4)

Compromised WordPress site injecting a ClickFix/EtherHiding loader that fetches an encrypted second stage from an Ethereum Sepolia smart contract

Obfuscated inline JavaScript with hidden blockchain RPC and known-attacker hosts only visible after decoding

External resources loaded from malware-flagged domains (zvh4.com, sepolia.gateway.tenderly.co)

Site serves a deceptive ClickFix lure to Windows visitors while displaying ordinary HVAC content

Domain age information unavailable

Details

Page Title

Gentlemens Mechanical – Coachella Valley HVAC/Refrigeration Services

Scan Type

public

Favicon Hash

MMH3: 530492348

MD5: dcab89b8e04bf53fcd7f6a44a8cb4fae

Domain Name Analysis

The domain 'gentlemensmechanical.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'gentlemensmechanical' spans 20 characters split between seven vowels and 13 consonants. Tokenizing the label suggests 3 words: gentlemen, s, mechanical. Average segment length settles at nine characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.25s

Total Load Time

774 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:633 chars

Detector Agreement:100%

Website Classification

Primary Category

social media network89% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

social media network

89%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	162.210.96.118	United States	AS14555LiquidNet US LLC
4	192.0.76.3	San Francisco, California, United States	AS2635Automattic, Inc
4	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
4	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	192.0.77.48	San Francisco, California, United States	AS2635Automattic, Inc
21	5	-	-