Security Report: searcomgroup.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/522a0684-16ca-440e-8531-bfe18267f1fc Domain and IP registration (RDAP)/api/v1/rdap/522a0684-16ca-440e-8531-bfe18267f1fcHow often this domain was scanned/api/v1/domain/stats/searcomgroup.com Scan history for this domain/api/v1/domain/history/searcomgroup.com?limit=15

This website contacted 8 IPs in 2 countries across 7 domains to perform 38 HTTP transactions. The main domain is searcomgroup.com and was registered 13 years ago.

Submitted URL: https://searcomgroup.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate 13-year-old SearcomGroup site is compromised: injected ClickFix 'Human Verification' kit plus EtherHiding blockchain loader push Terminal paste-and-run malware to visitors alongside gambling spam.

Risk Factors (6)

Compromised site injecting a ClickFix 'Human Verification' overlay that tricks Windows users into opening Terminal and pasting attacker-supplied commands

EtherHiding blockchain-based second-stage loader resolved via Polygon smart contracts (gateway.tenderly.co, polygon.drpc.org, 1rpc.io)

Obfuscated JavaScript concealing threat-feed-listed hosts

Injected Turkish illegal-gambling SEO spam text unrelated to the site's actual business

Multiple CRITICAL IDS malware/C2 and exploit-kit alerts tied to traffic from this page

Third-party unranked script host browse-codes-enter.beer serving code alongside the injected kit

Domain age information unavailable

Details

Page Title

SearcomGroup – SearcomGroup

Scan Type

public

Favicon Hash

MMH3: 2043116988

MD5: bd9bfc476765cf861ec11d05a4f1d9dc

Domain Name Analysis

The domain 'searcomgroup.com' uses the commercial generic top-level domain (.com) without a subdomain. The second-level label 'searcomgroup' is 12 characters long split between five vowels and 7 consonants. Breaking it apart gives three words: sear, com, group. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.65s

Total Load Time

1.6 MB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es-CO

Text Length:10,344 chars

Detector Agreement:25%

Website Classification

Primary Category

gambling betting97% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

gambling betting

97%

entertainment media

91%

technology software

59%

government public service

32%

news/blog

20%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	192.155.103.4	St Louis, Missouri, United States	AS30083velia.net
4	192.178.183.95Google · CDN	United States	AS15169Google LLC
4	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
4	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
4	142.251.20.94Google · CDN	United States	AS15169Google LLC
4	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
4	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
38	8	-	-