Security Scan Report: macoavell.in

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 6 domains to perform 53 HTTP transactions. The main domain is macoavell.in and was registered 7 months ago.

Submitted URL: https://macoavell.in

AI Security Verdict

Confirmed Scam

Confidence: 96%

9
Risk Score

Legitimate-looking MacoAvell paint site whose pages are compromised: analyst-vetted Macfinger ClickFix (AMOS stealer) loader, a CRITICAL ClickFix YARA hit and a CRITICAL AMOS IDS alert. Avoid visiting; report.

Risk Factors (5)
Analyst-vetted malware kit roster match: Macfinger ClickFix (AMOS stealer) shared loader and per-site first stage
CRITICAL high-precision YARA hit for ClickFix_BotProtection_Loader on the captured HTML
CRITICAL IDS alert for an AMOS ClickFix campaign loader request
Unranked external script/beacon hosts (owlabc.net, poalmcreorvelvet.pro) contacted by page scripts
Injected spam text unrelated to the site's business (compromise indicator)
Domain age information unavailable

Details

Page Title

Texture Paint Supplier in India | Premium Wall Finishes by MacoAvell

Scan Type

public

Domain Name Analysis

The domain 'macoavell.in' uses the Indian country-code top-level domain (.in) with no subdomain. The registrable portion 'macoavell' spans 9 characters split between 4 vowels and 5 consonants. Splitting it apart reveals four words: mac, o, ave, ll. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://macoavell.in

Page Load Overview

4.34s
Total Load Time
743 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,320 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning38% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
38%
documentation technical
38%
corporate
35%
social media network
30%
adult content
29%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13192.145.234.17United States
AS22611InMotion Hosting, Inc.
10142.250.154.95Google · CDNUnited States
AS15169Google LLC
10193.29.224.97Helsinki, Uusimaa, Finland
AS210644Aeza Group LLC
10142.251.20.94Google · CDNUnited States
AS15169Google LLC
10172.65.211.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
535--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D2B33A73B550203A265F12DEE09B7B0D7192EA6ADB428DE6F2FC1218C7D9DF130A1359

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:0JiK85Gewwvy4yhuprWIdkY25dEsUD3Sr6Q:0cI9OO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:111313:KMAYowbEYCEoAisBAxPCmRC0clFYQOhEFGMINIgBRSDBXiQG4BhkwiBTRGCDj4EAAIk0CYxHIADACRcNhMhLQcReFgQ6BjEJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff010101013fffff
Perceptual Hash:ab0bf4d480f4c69b
Difference Hash:eb7b7bfbfb670e0b
Wavelet Hash:ff0001010137ffff
Color Hash:#88d22d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data