Security Report: veltonbd.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/12545a87-8d43-49f3-b057-745f8805a5f8 Domain and IP registration (RDAP)/api/v1/rdap/12545a87-8d43-49f3-b057-745f8805a5f8How often this domain was scanned/api/v1/domain/stats/veltonbd.com Scan history for this domain/api/v1/domain/history/veltonbd.com?limit=15

This website contacted 12 IPs in 3 countries across 9 domains to perform 118 HTTP transactions. The main domain is veltonbd.com and was registered 5 months ago.

Submitted URL: https://veltonbd.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised WordPress store serving a ClickFix fake 'Cloudflare verification' overlay that tells Windows users to paste and run commands in Terminal; roster-anchored YARA hit, critical malware IDS alerts and blockchain RPC exfil. Do not interact.

Risk Factors (5)

Known ClickFix (Win+X/Terminal) fake-verification kit injected into a legitimate-looking store page

Social-engineering instructions guiding users to paste and execute commands in the Windows terminal

Impersonation of Cloudflare's security challenge UI on a non-Cloudflare shop page

Critical IDS malware alerts (EtherHiding exfiltration) and blockchain RPC beaconing typical of EtherHiding/loader infrastructure

Threat intelligence reports the primary domain veltonbd.com as a malware loader; third-party resource hosts checkyoubrowse.codes and rpc-mainnet.matic.quiknode.pro are independently flagged malicious

Domain age information unavailable

Details

Page Title

veltonbd.com – My WordPress Blog

Scan Type

public

Domain Name Analysis

The domain name 'veltonbd.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'veltonbd' stretches across 8 characters with two vowels and six consonants. Tokenizing the label suggests three words: v, elton, bd. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

16.63s

Total Load Time

5.6 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:6,613 chars

Detector Agreement:75%

Website Classification

Primary Category

gambling betting65% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

gambling betting

65%

finance banking

54%

e-commerce shopping

52%

news media journalism

35%

adult content

32%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
19	103.159.36.98	Bangladesh	AS138358Purple IT Ltd
9	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
9	142.251.110.95Google · CDN	United States	AS15169Google LLC
9	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
9	142.250.154.94Google · CDN	United States	AS15169Google LLC
9	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
9	142.251.13.95Google · CDN	United States	AS15169Google LLC
9	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
118	12	-	-