Security Scan: MakeIdealb

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/41f69859-7441-49af-b518-085032af7bf3 Domain and IP registration (RDAP)/api/v1/rdap/41f69859-7441-49af-b518-085032af7bf3How often this domain was scanned/api/v1/domain/stats/skincare.free.nf Scan history for this domain/api/v1/domain/history/skincare.free.nf?limit=15

This website contacted 14 IPs in 3 countries across 10 domains to perform 48 HTTP transactions. The main domain is free.nf and was registered 3 years 4 months ago.

Submitted URL: https://skincare.free.nf

Effective URL:

https://skincare.free.nf/?i=1

Redirected

The Cisco Umbrella rank of the primary domain is #538,365 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised gambling-content site on free hosting serving the analyst-vetted Macfinger ClickFix macOS AMOS stealer: CRITICAL YARA loader hit, AMOS/EtherHiding IDS alerts, and a multi-feed malicious-host reputation on the primary domain.

Risk Factors (5)

Analyst-vetted malicious kit (Macfinger ClickFix / AMOS stealer) served from the scanned domain

CRITICAL YARA rule ClickFix_BotProtection_Loader matched in page HTML

Multiple CRITICAL IDS alerts for AMOS ClickFix loader retrieval and EtherHiding exfiltration

Primary domain corroborated as a malicious host by two independent threat-intelligence feeds

Page injects/loads code from an unranked external host (krioldflaeara-willow.pro) via sendBeacon while contacting blockchain RPC domains

Domain age information unavailable

Details

Page Title

MakeIdealb

Scan Type

public

Favicon Hash

MMH3: -1249269704

MD5: 108dad091dcb90613b64e6305d61a9b2

Domain Name Analysis

Domain 'skincare.free.nf' uses the .nf country-code top-level domain and includes subdomain 'skincare'. The registrable portion 'free' spans 4 characters holding two vowels versus 2 consonants. It segments into 1 word: free. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

15.63s

Total Load Time

740 KB

Total Size

Language Analysis

Primary Language

🇮🇹Italian

Code: it

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:2,383 chars

Detector Agreement:100%

Language mismatch: Declared as en-US but detected as it

Website Classification

Primary Category

gambling betting100% confidence

Type: spa

Method: ml+structural

All Detected Categories

gambling betting

100%

entertainment media

97%

finance banking

96%

government public service

88%

adult content

82%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	185.27.134.170	United Kingdom	AS34119Wildcard UK Limited
3	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.20.95Google · CDN	United States	AS15169Google LLC
3	138.124.59.168	Helsinki, Uusimaa, Finland	AS210644Aeza Group LLC
3	172.217.112.4Google · CDN	United States	AS15169Google LLC
3	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
3	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	172.217.113.4Google · CDN	United States	AS15169Google LLC
3	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
48	14	-	-