Security Scan: Rama Dass Makeovers

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/54ea9654-f834-4b74-9399-fac6ecb9d661 Domain and IP registration (RDAP)/api/v1/rdap/54ea9654-f834-4b74-9399-fac6ecb9d661How often this domain was scanned/api/v1/domain/stats/rramadasmakeovers.com Scan history for this domain/api/v1/domain/history/rramadasmakeovers.com?limit=15

This website contacted 11 IPs in 3 countries across 9 domains to perform 103 HTTP transactions. The main domain is rramadasmakeovers.com and was registered 2 years 11 months ago.

Submitted URL: https://rramadasmakeovers.com/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate makeup-artist site compromised and serving Macfinger ClickFix/ClearFake malware loaders (CRITICAL YARA + kit roster + AMOS ClickFix IDS alert). Visitors risk infection; avoid the site.

Risk Factors (5)

Injected Macfinger ClickFix (macOS AMOS stealer) loader scripts on the page

Injected ClearFake EtherHiding loader reading a server list from a Polygon smart contract for Windows visitors

Injected ClearFake rival-kit cleanup script that removes competing kits' overlays and blocks navigation for up to 45 seconds

Critical IDS signature for the AMOS ClickFix campaign

Unranked third-party script host poalmcreorvelvet.pro receiving sendBeacon traffic from the page

Domain age information unavailable

Details

Page Title

Rama Dass Makeovers

Scan Type

public

Favicon Hash

MMH3: -343099666

MD5: a8e86f88997fae4d2dbded370643a8e3

Domain Name Analysis

Domain 'rramadasmakeovers.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'rramadasmakeovers' stretches across 17 characters with 7 vowels and 10 consonants. Word splitting yields 5 words: r, rama, das, makeover, s. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.52s

Total Load Time

4.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:6,141 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service77% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

77%

adult content

75%

healthcare medical

50%

education learning

29%

documentation technical

26%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	142.251.14.95Google · CDN	United States	AS15169Google LLC
9	193.29.224.97	Helsinki, Uusimaa, Finland	AS210644Aeza Group LLC
9	192.178.183.97Google · CDN	United States	AS15169Google LLC
9	23.207.210.148Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
9	142.251.14.94Google · CDN	United States	AS15169Google LLC
9	216.239.34.36Google · CDN	United States	AS15169Google LLC
9	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	23.207.210.143Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
9	216.239.32.36Google · CDN	United States	AS15169Google LLC
103	11	-	-