Security Scan Report: sites.google.com

Submitted: Completed: publiccompleted
This website contacted 20 IPs in 2 countries across 9 domains to perform 36 HTTP transactions. The main domain is google.com and was registered 29 years ago.

Submitted URL: https://sites.google.com/view/antibot381122/

The Cisco Umbrella rank of the primary domain is #1 of the top 1 million websitesTop 100 Site

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Google Sites page carrying an analyst-vetted ErrTraffic/Exvicy ClickFix loader (CRITICAL YARA hit) behind a fake 'review your connection' CAPTCHA lure that pushes users to run a malicious command; brand shown as ChatGPT.

Risk Factors (6)
Analyst-vetted malicious kit (ErrTraffic/Exvicy ClickFix loader) injected into the page
CRITICAL-severity YARA malware match on the inline script
Fake CAPTCHA / connection-review lure designed to make the user execute a malicious payload
DevTools and view-source blocking to hinder analysis
Page loads third-party resource fafaplapla.com, reported as a known attacker host (single-source, unverified) — consistent with loader callback infrastructure
Brand 'ChatGPT' shown in title/meta on a non-official domain
Domain age information unavailable

Details

Page Title

ChatGPT

Scan Type

public

Domain Name Analysis

You're looking at domain 'sites.google.com' on the commercial generic top-level domain (.com), featuring subdomain 'sites'. Count 6 characters in 'google' with 3 vowels and three consonants. It segments into 1 word: google. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sites.google.com/view/antibot381122/

Page Load Overview

6.16s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:322 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service34% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
34%
technology software
33%
corporate
25%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17192.178.183.139Google · CDNUnited States
AS15169Google LLC
1142.251.14.139Google · CDNUnited States
AS15169Google LLC
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1192.178.183.94Google · CDNUnited States
AS15169Google LLC
1192.178.183.141Google · CDNUnited States
AS15169Google LLC
1142.250.154.113Google · CDNUnited States
AS15169Google LLC
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
1142.251.110.138Google · CDNUnited States
AS15169Google LLC
1142.251.110.100Google · CDNUnited States
AS15169Google LLC
1142.251.14.101Google · CDNUnited States
AS15169Google LLC
3620--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11AE37D56F7046CBAC6A700A9301FE24E32BA406BD505D6B4E2FAE4D02FEC9DDD06572D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:hR/XGcFHUuXlR/XGcFH0vgZGI063yNnTNkNdSVthk9gjdKRJKmGYgDKn4r9b5f/I:0363yQ8uTJKRzd5wMyUNO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:155857:jBDDIsQgBKpTCBA4BYiKgw0FFGGmhBpkimITECiFMAMFkIQKwAAWIgWCsAEMIva1KZFAoLCAlBghhEQCgahUJ1AkEBhQEUQb

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc7c3ffff3f3f
Perceptual Hash:b9f807ca0646ee87
Difference Hash:181816364000606c
Wavelet Hash:3f0f03033f3f3f00
Color Hash:#2d3c86

Other Hashes

Crop Resistant:181816364000606c

Scan History

Scan history not available

Unable to load historical scan data