Security Scan Report: citglobalsolutions.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 13 domains to perform 100 HTTP transactions. The main domain is citglobalsolutions.com and was registered 5 years ago.

Submitted URL: https://citglobalsolutions.com/

AI Security Verdict

High Risk

Confidence: 88%

9
Risk Score

Legitimate-looking BPO site whose pages load malware/exploit-kit payloads: 20 CRITICAL IDS alerts (EtherHiding exfiltration, tdsshop web inject), blockchain RPC C2 and Safe Browsing unwanted-software flag. Likely compromised.

Risk Factors (5)
CRITICAL network IDS malware and exploit-kit alerts on page load
Google Safe Browsing unwanted-software detection
Blockchain RPC connection to a public BSC testnet node (EtherHiding exfiltration pattern)
Multiple suspicious .shop / throwaway domains referenced by the page
Unranked domain with low legitimacy score (38/100) despite claiming a multi-year operation
Domain age information unavailable

Details

Page Title

Home - CIT Global Solutionsother network

Scan Type

public

Domain Name Analysis

Domain 'citglobalsolutions.com' uses the commercial generic top-level domain (.com). The second-level label 'citglobalsolutions' is 18 characters long holding seven vowels versus 11 consonants. Tokenizing the label suggests four words: c, it, global, solutions. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

@ (2 CIT GLOBAL SOLUTIONS. Innovation Simplified AlLIAAL Ft IIa % CALL US >

Page Load Overview

N/A
Total Load Time
802 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,106 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business77% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
77%
government public service
68%
technology software
63%
adult content
53%
blog personal website
46%

Detected Features

Articles
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16162.241.118.146Mumbai, Maharashtra, India
AS46606Unified Layer
12142.251.20.95Google · CDNUnited States
AS15169Google LLC
12142.251.110.97Google · CDNUnited States
AS15169Google LLC
1295.129.234.12Russia
AS57724Ddos-guard Ltd
1237.72.140.76Russia
AS211663GALEON LLC
12104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12142.251.20.94Google · CDNUnited States
AS15169Google LLC
12216.239.34.36Google · CDNUnited States
AS15169Google LLC
08--

Detected Technologies5

WordPressv7.1.3
100%
JQueryv3.7.1
100%
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1115408607BD13850220B03BBB3177298F07A8DE9F18948DAF4BDB404F7A5E51B6E2579

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:h8r+0H2YzW4RWMTTXKsfelpNGD5/EDlesZueXW6HPFBI0SMR:ho+0Wo7DWlpNGD5/ExemWOPFtSc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:295239:Y0xhOlACyQT11JAK0IiIDIQQJA0BwjswAwg0YVBIqcgTRBoMAQDBABERNWkmYJaQAijtBQokFcUYxlQxBZINyokxFSABEVko

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:98dcfeffffffffe7
Perceptual Hash:dd5d3d1c3a08369c
Difference Hash:3222000000000008
Wavelet Hash:98fe3e3e02023e26
Color Hash:N/A

Other Hashes

Crop Resistant:3222000000000008

Scan History

Scan history not available

Unable to load historical scan data