Security Report: guzmanintel.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c4470d97-1bf0-4311-8beb-e635d3a0cabe Domain and IP registration (RDAP)/api/v1/rdap/c4470d97-1bf0-4311-8beb-e635d3a0cabeHow often this domain was scanned/api/v1/domain/stats/guzmanintel.com Scan history for this domain/api/v1/domain/history/guzmanintel.com?limit=15

This website contacted 21 IPs in 4 countries across 17 domains to perform 107 HTTP transactions. The main domain is guzmanintel.com and was registered 11 years ago.

Submitted URL: https://guzmanintel.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate-looking consulting site is compromised and serving a ClearFake EtherHiding ClickFix loader: critical hunting rules, kit-roster match, critical EtherHiding IDS alert, obfuscated scripts hiding threat-feed hosts, and injected gambling spam.

Risk Factors (6)

ClearFake/EtherHiding infection: critical hunting rules and analyst-vetted kit roster match

Critical network IDS malware alert (EtherHiding Exfil)

Obfuscated JavaScript concealing malicious campaign-tracking hosts

Page loads scripts from four separate threat-feed-flagged domains

Injected off-topic gambling SEO spam articles (German, Italian, French, Polish, Norwegian, Dutch) in a site whose real content is SIGINT/SIGDEV consulting — classic compromised-site cloaking spam

Blockchain RPC (Polygon) traffic from page scripts used to fetch the next-stage payload

Domain age information unavailable

Details

Page Title

Home - Guzman Intelligence Solutions

Scan Type

public

Favicon Hash

MMH3: 1061299807

MD5: d48080426a6d1dc9d6cd133f7e2788d2

Domain Name Analysis

Domain 'guzmanintel.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'guzmanintel' spans 11 characters holding four vowels versus 7 consonants. Segmentation suggests 3 words: guzm, an, intel. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.95s

Total Load Time

5.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:28,259 chars

Detector Agreement:75%

Website Classification

Primary Category

corporate35% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate

35%

technology software

29%

news/blog

20%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	160.153.0.48Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
5	142.251.127.95Google · CDN	United States	AS15169Google LLC
5	13.226.244.15Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
5	2.21.239.4Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
5	185.92.183.208	Riga, Riga, Latvia	AS56971Cgi Global Limited
5	192.178.183.94Google · CDN	United States	AS15169Google LLC
5	52.92.180.88Aws · CLOUD	Boardman, Oregon, United States	AS16509Amazon.com, Inc.
5	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
5	142.251.127.84Google · CDN	United States	AS15169Google LLC
5	13.33.52.208Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
107	21	-	-