Security Report: 702490.us28.myftpupload.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5fc9e2ef-1260-4eba-8172-f72e60b61dc5 Domain and IP registration (RDAP)/api/v1/rdap/5fc9e2ef-1260-4eba-8172-f72e60b61dc5How often this domain was scanned/api/v1/domain/stats/702490.us28.myftpupload.com Scan history for this domain/api/v1/domain/history/702490.us28.myftpupload.com?limit=15

This website contacted 27 IPs in 4 countries across 21 domains to perform 86 HTTP transactions. The main domain is myftpupload.com and was registered 13 years ago.

Submitted URL: https://702490.us28.myftpupload.com

The Cisco Umbrella rank of the primary domain is #61,508 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Compromised WordPress host serving ClickFix/EtherHiding malware: fake Cloudflare 'Human Verification' overlay telling visitors to paste a Terminal command, plus injected casino SEO spam. Do not interact.

Risk Factors (5)

Compromised WordPress host running injected ClickFix / EtherHiding loaders

Deceptive fake 'Human Verification' overlay impersonating Cloudflare to induce manual command execution

Obfuscated inline script (Base64 blob XOR-decoded and executed via new Function) hiding threat-feed RPC hosts

SEO-spam content injection: unrelated gambling/casino posts in Indonesian, Polish, Turkish, Russian and German appended to a credit-repair site

Page links to the separate domain theficobooster.com, itself flagged as ClearFake malware

Domain age information unavailable

Details

Page Title

The FICO Booster – Boost Your Credit Score the Right Way.

Scan Type

public

Domain Name Analysis

The domain '702490.us28.myftpupload.com' uses the commercial generic top-level domain (.com) and includes subdomain '702490.us28'. The registrable portion 'myftpupload' spans 11 characters with 3 vowels and 8 consonants. Word splitting yields 3 words: my, ftp, upload. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.29s

Total Load Time

1.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:6,608 chars

Detector Agreement:67%

Website Classification

Primary Category

gambling betting95% confidence

Type: spa

Method: ml+structural

All Detected Categories

gambling betting

95%

entertainment media

95%

blog personal website

92%

finance banking

90%

cryptocurrency blockchain

90%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	160.153.0.148Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
3	142.251.14.95Google · CDN	United States	AS15169Google LLC
3	160.153.0.30Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
3	171.22.131.23	Cyprus	AS203273NetCrafters OU
3	23.53.42.211Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	142.250.154.94Google · CDN	United States	AS15169Google LLC
3	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
3	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	208.115.201.238	Frankfurt am Main, Hesse, Germany	AS46475Limestone Networks, Inc.
86	27	-	-