Security Report: officialpromodeal.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/20efda72-caad-4a45-ad13-937af5c2b3b4 Domain and IP registration (RDAP)/api/v1/rdap/20efda72-caad-4a45-ad13-937af5c2b3b4How often this domain was scanned/api/v1/domain/stats/officialpromodeal.com Scan history for this domain/api/v1/domain/history/officialpromodeal.com?limit=15

This website contacted 38 IPs in 3 countries across 16 domains to perform 102 HTTP transactions. The main domain is officialpromodeal.com and was registered 1 year 4 months ago.

Submitted URL: https://officialpromodeal.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Compromised/malicious WordPress gambling doorway hosting an analyst-vetted ClickFix Win+X fake human-verification overlay (CRITICAL YARA + kit roster) and flagged as malware by two threat feeds. Avoid; do not paste any commands.

Risk Factors (7)

Injected ClickFix fake human-verification overlay delivering PowerShell commands (Windows ClickFix)

CRITICAL YARA hit for ClickFix_WinX_Overlay_Kit (analyst-vetted malicious kit)

Primary domain flagged as clearfake/malware by two corroborated threat-intel feeds

CRITICAL IDS alert ET MALWARE EtherHiding Exfil M2 and blockchain RPC/Ethereum contract calls (polygon.drpc.org, 1rpc.io)

Spamhaus DROP listed traffic (HIGH IDS alert)

Heavy SEO gambling doorway content covering multiple unrelated casino brands with no legitimate ownership or licensing

Unranked in Cisco Umbrella top 1M with minimal legitimacy signals

Domain age information unavailable

Details

Page Title

Official Promo Deal – My WordPress Blog

Scan Type

public

Favicon Hash

MMH3: 530492348

MD5: dcab89b8e04bf53fcd7f6a44a8cb4fae

Domain Name Analysis

Domain 'officialpromodeal.com' uses the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'officialpromodeal' spans 17 characters split between 8 vowels and nine consonants. Segmentation suggests 3 words: official, promo, deal. Median word length comes out to five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.06s

Total Load Time

6.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:63%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:81,903 chars

Detector Agreement:75%

Language mismatch: Declared as pt-BR but detected as en

Website Classification

Primary Category

gambling betting90% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

gambling betting

90%

technology software

63%

entertainment media

62%

documentation technical

39%

education learning

31%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
28	162.241.63.57	Vinhedo, São Paulo, Brazil	AS31898Oracle Corporation
2	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
2	142.251.110.190Google · CDN	United States	AS15169Google LLC
2	142.251.13.119Google · CDN	United States	AS15169Google LLC
2	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	192.0.77.48	San Francisco, California, United States	AS2635Automattic, Inc
2	52.55.240.217Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
2	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
2	142.250.154.190Google · CDN	United States	AS15169Google LLC
2	142.250.154.93Google · CDN	United States	AS15169Google LLC
102	38	-	-