Security Report: lincolnfinancialservicesllc.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0cbe307a-5097-46b9-b361-b575ff768472 Domain and IP registration (RDAP)/api/v1/rdap/0cbe307a-5097-46b9-b361-b575ff768472 Certificate Transparency/api/v1/ct/lincolnfinancialservicesllc.com How often this domain was scanned/api/v1/domain/stats/lincolnfinancialservicesllc.com Scan history for this domain/api/v1/domain/history/lincolnfinancialservicesllc.com?limit=15

This website contacted 16 IPs in 2 countries across 11 domains to perform 99 HTTP transactions. The main domain is lincolnfinancialservicesllc.com and was registered 29 years ago.

Submitted URL: https://lincolnfinancialservicesllc.com

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised real-estate site serving the ClickFix Win+X/Terminal overlay and an EtherHiding blockchain loader; CRITICAL YARA/kit-roster hits, 7 CRITICAL IDS malware alerts and a malware threat-intel match on the primary domain. Do not visit.

Risk Factors (6)

Known malicious ClickFix Win+X/Terminal overlay kit injected into the page (analyst-vetted kit roster, CRITICAL).

EtherHiding loader reading its next-stage host from a blockchain smart contract (YARA + IDS).

7 CRITICAL IDS alerts for ClickFix domain contact, EtherHiding exfiltration and exploit-kit activity.

Primary domain matched as clearfake malware by two independent threat-intel feeds.

Meta description and page content stuffed with unrelated gambling spam and hidden/off-topic outbound links, indicating site compromise.

Obfuscated script contacting unranked, threat-feed-flagged script hosts (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co) and unranked third-party JS hosts browse-codes-enter.beer and wuntred.com.

Domain age information unavailable

Details

Page Title

Home - Lincoln Financial Services LLC

Scan Type

public

Favicon Hash

MMH3: 1606451715

MD5: 6acd40141f863cf135a66845d3c41bc9

Domain Name Analysis

The domain name 'lincolnfinancialservicesllc.com' uses the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'lincolnfinancialservicesllc' stretches across 27 characters with nine vowels and 18 consonants. It segments into four words: lincoln, financial, services, llc. Median word length is 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.39s

Total Load Time

7.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:3,770 chars

Detector Agreement:80%

Website Classification

Primary Category

real estate property98% confidence

Type: spa

Method: ml+structural

All Detected Categories

real estate property

98%

corporate business

74%

corporate

35%

adult content

27%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	141.193.213.10Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
6	142.251.110.95Google · CDN	United States	AS15169Google LLC
6	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
6	142.251.20.94Google · CDN	United States	AS15169Google LLC
6	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
6	172.67.165.144Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
6	142.250.154.100Google · CDN	United States	AS15169Google LLC
6	142.251.157.119Google · CDN	United States	AS15169Google LLC
99	16	-	-