Security Report: mcwlogin.club - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6bfce597-22fd-46cb-8ce4-e39524784e75 Domain and IP registration (RDAP)/api/v1/rdap/6bfce597-22fd-46cb-8ce4-e39524784e75How often this domain was scanned/api/v1/domain/stats/mcwlogin.club Scan history for this domain/api/v1/domain/history/mcwlogin.club?limit=15

This website contacted 5 IPs in 2 countries across 3 domains to perform 133 HTTP transactions. The main domain is mcwlogin.club and was registered 1 year 2 months ago.

Submitted URL: https://mcwlogin.club

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Primary domain flagged as malware by two feeds and a CRITICAL EtherHiding IDS alert, on a page posing as a Cloudflare check that instructs users to paste terminal commands (ClickFix) while running a fake casino portal.

Risk Factors (6)

Primary domain itself flagged as malware ('clearfake') by two corroborating threat-intelligence feeds

CRITICAL network IDS alert for EtherHiding exfiltration malware

ClickFix-style fake CAPTCHA tricking users into executing terminal commands (malware dropper)

Brand impersonation of Cloudflare's connection/security check

Blockchain RPC endpoint contacted by page scripts

Illegal/unlicensed online gambling content

Domain age information unavailable

Details

Page Title

MCW Login - MCW-Login Club

Scan Type

public

Favicon Hash

MMH3: 231767297

MD5: 5038624c564e845268e27a33be06fda7

Domain Name Analysis

The domain name 'mcwlogin.club' uses the membership-focused generic top-level domain (.club) while skipping any subdomain. The core label 'mcwlogin' covers 8 characters split between 2 vowels and six consonants. Word splitting yields 3 words: m, cw, login. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

14.99s

Total Load Time

3.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:5,106 chars

Detector Agreement:75%

Website Classification

Primary Category

gambling betting82% confidence

Type: spa

Method: ml+structural

All Detected Categories

gambling betting

82%

entertainment media

79%

adult content

73%

healthcare medical

49%

government public service

49%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
29	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
26	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
26	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
26	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
26	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
133	5	-	-