ScanMalware.com

Security Scan Report: titanuphose.com

Submitted: Oct 8, 2026, 11:50:01 AMCompleted: Oct 8, 2026, 11:50:45 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Legitimate self-branded hose-repair site, but its HTML carries an analyst-confirmed ClickFix/AMOS stealer loader (CRITICAL YARA hit + CRITICAL IDS alert + unranked beacon host). Likely compromised; do not browse or interact.

Risk Factors (5)
Known malicious stealer kit (Macfinger ClickFix / AMOS loader) identified by analyst-vetted kit roster
CRITICAL-severity YARA rule hit (ClickFix_BotProtection_Loader) on page content
CRITICAL IDS alert for AMOS ClickFix malware loader request
Page loads script from an unranked external host (poalmcreorvelvet.pro) and sends beacon data to it
Likely compromised site serving injected malware to visitors
Domain age information unavailable

Details

Page Title

Titanuphose | Hydraulic Hose Repair. – Hydraulic hose repair that feels local, direct, and easy to call.

Scan Type

public

Domain Name Analysis

The domain name 'titanuphose.com' uses the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'titanuphose' stretches across 11 characters with five vowels and 6 consonants. Breaking it apart gives three words: titan, up, hose. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://titanuphose.com

Page Load Overview

7.04s
Total Load Time
4.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:4,189 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical69% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
69%
government public service
65%
corporate business
43%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20198.96.89.106United States
AS19318Interserver, Inc
6142.251.20.95Google · CDNUnited States
AS15169Google LLC
6193.29.224.97Helsinki, Uusimaa, Finland
AS210644Aeza Group LLC
6192.178.183.94Google · CDNUnited States
AS15169Google LLC
6192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
6142.251.13.138Google · CDNUnited States
AS15169Google LLC
6142.251.155.119Google · CDNUnited States
AS15169Google LLC
6142.251.14.94Google · CDNUnited States
AS15169Google LLC
6172.217.114.4Google · CDNUnited States
AS15169Google LLC
6172.217.117.4Google · CDNUnited States
AS15169Google LLC
14021--

Detected Technologies8

WordPressv7.1.2
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
LiteSpeed
40%
HTTP/3
40%
Swiper
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15E24D9717B511825301F839FD047A60C2199EAE3E60E76E5F4F6902897FCFA532E2729

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:L8C6ckosfQ4UUZmwu03TahKj3K5EwBzgRxcEgGWTJr:APPE5Ryc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:227580:U8haBMFokQgIqOQZEChYqBIkCZAQIpUAWAAwCRkBhMRJAHJNkACgVCJXSDZMk1BSAyAUkCJEQyCBNCiCQWARcFBJMyVA1Vgp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:42007666761c0060
Perceptual Hash:c2843d9ee1f196c6
Difference Hash:94cdccccc4edc9c5
Wavelet Hash:ff007666777e4060
Color Hash:#7997d2

Other Hashes

Crop Resistant:b3b3b0b5b4b4b4b3,2726585a56542627,62620a8aaaaaa6a4,557529adadada3b2,96ccccccc4fcc9c7

Scan History

Scan history not available

Unable to load historical scan data