Security Scan Report: baileycreative.london

Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 127 HTTP transactions. The main domain is baileycreative.london and was registered 8 years ago.

Submitted URL: https://baileycreative.london

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Legitimate 8-year-old business site whose page carries an analyst-vetted Macfinger ClickFix/AMOS stealer loader (CRITICAL YARA hit) injected into its HTML. Do not load the page or follow any ClickFix instructions; the site appears compromised.

Risk Factors (4)
Known malicious JavaScript kit (Macfinger ClickFix / AMOS infostealer loader) detected on the page
CRITICAL-severity YARA rule ClickFix_TDS_TJs_Site_Loader_Tag matched in the page's own HTML
Injected loader tag points to rotating attacker-controlled infrastructure (t.js?site=<32 hex>), indicating compromise
Site delivers a macOS ClickFix social-engineering lure leading to infostealer installation
Domain age information unavailable

Details

Page Title

Home - Bailey Creative

Scan Type

public

Domain Name Analysis

Within the .london top-level domain, 'baileycreative.london' is registered. The second-level label 'baileycreative' is 14 characters long with 7 vowels and 7 consonants. It segments into two words: bailey, creative. Median word length is seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://baileycreative.london

Page Load Overview

8.28s
Total Load Time
1.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,719 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content45% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
45%
corporate business
43%
corporate
35%
documentation technical
31%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2769.72.248.110London, England, United Kingdom
AS51713WHG Hosting Services Ltd
25142.250.154.95Google · CDNUnited States
AS15169Google LLC
25192.178.183.94Google · CDNUnited States
AS15169Google LLC
25142.251.110.95Google · CDNUnited States
AS15169Google LLC
25142.251.110.94Google · CDNUnited States
AS15169Google LLC
1275--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T155240932391E5829122F42CB9133370EA48AAEFBD94690F4F1FE446D93F4D91379B652

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:heehSam4R3rjSsUmmk+8Qi6i3UjOCWkKYDYKINoeO4VxkiYjWj7j8g+YXzr4X7pF:hYam43wbsKINhDk3jWj7j0Z

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:209638:wiAMGjGIBoEIJQZhLNQ4gACEmQIEAIDkkAEc42QsXQAEtSiAgkp7vkBY/GBRDi2AU8jgGC44DMVBDCQiIAwCEUIEQlipcUgQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ff003c3c0000ff
Perceptual Hash:8a7df42fcf282e02
Difference Hash:650669696969d4c4
Wavelet Hash:00ff003c3c3c3cff
Color Hash:#931f4e

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data