Security Scan: My Blog

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/63c1521c-25ab-4c26-99bd-f2e69bcb1852 Domain and IP registration (RDAP)/api/v1/rdap/63c1521c-25ab-4c26-99bd-f2e69bcb1852How often this domain was scanned/api/v1/domain/stats/shopingtips.com Scan history for this domain/api/v1/domain/history/shopingtips.com?limit=15

This website contacted 10 IPs in 2 countries across 6 domains to perform 83 HTTP transactions. The main domain is shopingtips.com and was registered 6 months ago.

Submitted URL: https://shopingtips.com

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Compromised WordPress site running a ClickFix lure that copies a malicious PowerShell command to the clipboard under a fake Cloudflare verification screen, with YARA, kit-roster and critical IDS malware alerts. Do not paste anything; leave the page.

Risk Factors (9)

Fake 'I am not a robot' verification overlay instructing visitors to paste a copied command into PowerShell/Terminal (ClickFix technique)

Malicious clipboard injection of a shell command on page load (9 clipboard events)

Analyst-vetted known malicious kit identification (clickfix-winx-overlay-2026-10)

High-precision YARA rule hit for the WinX Terminal lure

Critical IDS malware/exfiltration alerts (EtherHiding) during the visit

Threat-intel match for ClearFake on the primary domain

Branded UI styled as Cloudflare verification without being Cloudflare (mismatched domain)

6 cross-domain redirects and eval() usage in inline scripts

Compromised/abandoned WordPress install repurposed for malware delivery

Domain age information unavailable

Details

Page Title

My Blog

Scan Type

public

Domain Name Analysis

Domain 'shopingtips.com' uses the commercial generic top-level domain (.com) with no subdomain. The core label 'shopingtips' covers 11 characters with three vowels and eight consonants. Tokenizing the label suggests 3 words: s, hoping, tips. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.02s

Total Load Time

572 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:3,136 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence

Type: spa

Method: structural

All Detected Categories

corporate

70%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
8	34.111.175.102Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
8	172.67.142.245Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
8	77.88.21.119Yandex · CLOUD	Moscow, Moscow, Russia	AS13238YANDEX LLC
8	104.21.27.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	87.250.250.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
8	87.250.251.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
83	10	-	-