Security Scan Report: sites.google.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 2 countries across 10 domains to perform 37 HTTP transactions. The main domain is google.com and was registered 29 years ago.

Submitted URL: https://sites.google.com/view/antibot381122/

The Cisco Umbrella rank of the primary domain is #1 of the top 1 million websitesTop 100 Site

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Google Sites page titled ChatGPT running the ErrTraffic/Exvicy injected loader plus a CRITICAL ClickFix cmd-cipher YARA hit behind a fake 'I'm not a robot' CAPTCHA — a ClickFix malware lure impersonating ChatGPT. Confirmed scam.

Risk Factors (5)
Known malicious kit identified by the analyst-vetted kit roster (ErrTraffic/Exvicy injected loader, CRITICAL phishing)
CRITICAL high-precision YARA match for ClickFix cmd.exe delayed-expansion index cipher
Fake CAPTCHA / fake Google connection-review social engineering (ClickFix) designed to make the visitor run an attacker command
Impersonation of the ChatGPT brand on a non-owned sites.google.com host
DevTools / right-click / view-source blocking and anti-analysis JavaScript
Domain age information unavailable

Details

Page Title

ChatGPT

Scan Type

public

Domain Name Analysis

The domain 'sites.google.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'sites'. Its registrable label 'google' stretches across 6 characters holding three vowels versus three consonants. Segmentation suggests one word: google. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sites.google.com/view/antibot381122/

Page Load Overview

3.97s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:322 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service34% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
34%
technology software
33%
corporate
25%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3142.251.13.139Google · CDNUnited States
AS15169Google LLC
2142.251.13.138Google · CDNUnited States
AS15169Google LLC
2142.251.127.95Google · CDNUnited States
AS15169Google LLC
2192.178.183.94Google · CDNUnited States
AS15169Google LLC
2142.251.20.138Google · CDNUnited States
AS15169Google LLC
2142.250.154.94Google · CDNUnited States
AS15169Google LLC
2142.251.20.102Google · CDNUnited States
AS15169Google LLC
2142.251.127.100Google · CDNUnited States
AS15169Google LLC
2142.251.13.113Google · CDNUnited States
AS15169Google LLC
2142.251.20.139Google · CDNUnited States
AS15169Google LLC
3718--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10DE38C16F7146CBA869700E9301FE24E32BA406BD505D6B4E2FAE4D02FEC9DED06572D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:RJR/x5u7s7Lu0bR/x5u7s7utf28P46y6nRAWm6Z7UbfDthk9gjdzRJKmGYgDKn4J:d/U46yHWm8kf88JKRzd5wMyENp

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:155748:wR5ASsTZGAMgAxBIDGNNySEMgEUwgSD4BAZEgtAqP3AkRSgWCEJQa6REQOgNozMAdAUQiDgM0yJQgDwMozgHUA4imBrmm4JD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc7c3ffff3f3f
Perceptual Hash:b9f807ca0646ee87
Difference Hash:181816364000606c
Wavelet Hash:3f0f03033f3f3f00
Color Hash:#40bf60

Other Hashes

Crop Resistant:181816364000606c

Scan History

Scan history not available

Unable to load historical scan data