Security Report: prominencevisaservices.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/481f07a2-4df3-4460-81ee-686f526c2287 Domain and IP registration (RDAP)/api/v1/rdap/481f07a2-4df3-4460-81ee-686f526c2287How often this domain was scanned/api/v1/domain/stats/prominencevisaservices.com Scan history for this domain/api/v1/domain/history/prominencevisaservices.com?limit=15

This website contacted 9 IPs in 3 countries across 9 domains to perform 174 HTTP transactions. The main domain is prominencevisaservices.com and was registered 2 years 3 months ago.

Submitted URL: https://prominencevisaservices.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate-looking Dubai visa services site that has been compromised: it serves the analyst-vetted Macfinger ClickFix AMOS stealer loader (kit roster, YARA, and critical IDS alert all agree). Avoid interaction.

Risk Factors (6)

Known malicious Macfinger ClickFix / AMOS stealer kit identified on the site (kit roster, analyst-vetted, CRITICAL)

YARA rule ClickFix_BotProtection_Loader matched on page (CRITICAL stealer)

Network IDS CRITICAL alert for AMOS ClickFix Campaign loader script request

Compromised WordPress site serving attacker-injected first-stage loader

Unrelated gambling spam text injected into page content

Unranked third-party script host poalmcreorvelvet.pro contacted by page scripts

Domain age information unavailable

Details

Page Title

Prominence Visa Services – Immigration Process Made Easier

Scan Type

public

Favicon Hash

MMH3: 1816623845

MD5: 516cb467107073f223e9ea7534bb1167

Domain Name Analysis

The domain 'prominencevisaservices.com' uses the commercial generic top-level domain (.com) without a subdomain. The second-level label 'prominencevisaservices' is 22 characters long split between nine vowels and 13 consonants. It segments into 3 words: prominence, visa, services. Median word length is eight characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

11.50s

Total Load Time

4.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:11,444 chars

Detector Agreement:75%

Website Classification

Primary Category

government public service77% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

77%

adult content

39%

healthcare medical

31%

news media journalism

28%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
22	213.139.204.83	Frankfurt am Main, Hesse, Germany	AS395092Shock Hosting LLC
19	142.251.110.95Google · CDN	United States	AS15169Google LLC
19	193.29.224.97	Helsinki, Uusimaa, Finland	AS210644Aeza Group LLC
19	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
19	88.99.95.221	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
19	142.251.14.94Google · CDN	United States	AS15169Google LLC
19	74.208.125.201	United States	AS8560IONOS SE
19	192.0.77.48	San Francisco, California, United States	AS2635Automattic, Inc
19	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
174	9	-	-