Security Scan Report: www.cortigraphics.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 5 domains to perform 63 HTTP transactions. The main domain is cortigraphics.com and was registered 10 years ago.

Submitted URL: https://www.cortigraphics.com

AI Security Verdict

High Risk

Confidence: 95%

9
Risk Score

Compromised CortiGraphics site carrying an injected, roster-confirmed ClickFix 'Human Verification' loader with critical EtherHiding IDS alerts; visiting risks malware infection via a fake CAPTCHA/Terminal prompt.

Risk Factors (5)
Known malicious ClickFix Windows overlay kit injected into the page (analyst-vetted roster match)
Critical hunting-rule signature for a packed smart-contract-driven overlay loader
Critical IDS malware alerts for EtherHiding exfiltration
Blockchain RPC fetches used as a dead-drop resolver for the malicious overlay host
Compromised legitimate site — visitors are redirected toward a fake 'Human Verification' prompt instructing them to run Terminal commands that install a loader
Domain age information unavailable

Details

Page Title

CortiGraphics – Graphic Designer e Art Director

Scan Type

public

Domain Name Analysis

The domain name 'www.cortigraphics.com' uses the commercial generic top-level domain (.com) with subdomain 'www'. The second-level label 'cortigraphics' is 13 characters long with 4 vowels and 9 consonants. Segmentation suggests 2 words: corti, graphics. Average segment length settles at 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

add_action('wp_footer’, function () {echo "5 }, 99}; coming soon — info@cortigraphics.com

Page Load Overview

2.26s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:67%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:140 chars
Detector Agreement:100%
Language mismatch: Declared as it-IT but detected as en

Website Classification

Primary Category

news media journalism45% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism
45%
documentation technical
41%
corporate business
34%
healthcare medical
30%
government public service
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
989.46.106.54Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
9142.250.154.95Google · CDNUnited States
AS15169Google LLC
9104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.13.94Google · CDNUnited States
AS15169Google LLC
935.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
9104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
637--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T108932B77BB961209511F4FCAE7CA77186039D122B4520EEDB6CD010B4FA6DEC21A772B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:7wsSWr0oZPXITap7N6A6ZcjqNPq2KDZ2h/zFejePq4KhFj44UJHNmq3/OEVe7:sorRN6AFqNPq2KDZ2h/zFkePq4KhFU4t

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:93655:IBIN0YwQFK+JSgiIN60qaAorZCjYCygAAAnjAn6AOBiwEAArFSsAiMtCIRDYnIuSaQCspYIymFFkQmASISBeB5cSAGraRdAa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7f7ffe7ff
Perceptual Hash:f73388cc26339999
Difference Hash:c8004c4c0c000c08
Wavelet Hash:30f02020f2fae6fe
Color Hash:07000000000

Other Hashes

Crop Resistant:c8004c4c0c000c08

Scan History

Scan history not available

Unable to load historical scan data