Security Scan Report: promopixelstudio.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 25 IPs in 4 countries across 11 domains to perform 129 HTTP transactions. The main domain is promopixelstudio.com and was registered 2 years 11 months ago.

Submitted URL: https://promopixelstudio.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Legitimate PromoPixel Studio site compromised: page injects the Macfinger ClickFix AMOS stealer loader (2 critical hunting-rule hits, critical IDS alert) and loads a malicious flagged host silverrogpuia.pro. Do not visit; malware risk.

Risk Factors (4)
Injected ClickFix/AMOS stealer loader on an otherwise legitimate WordPress site (compromised site serving malware)
Page loads a script from silverrogpuia.pro, an unranked host reported as a malicious exploit kit by two independent feeds
CRITICAL IDS alert for AMOS ClickFix loader script request
sendBeacon data transmission to the flagged unranked host silverrogpuia.pro
Domain age information unavailable

Details

Page Title

Home - Promopixelstudio

Scan Type

public

Domain Name Analysis

The domain 'promopixelstudio.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'promopixelstudio' stretches across 16 characters with 7 vowels and nine consonants. It segments into three words: promo, pixel, studio. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

+971 505076214 a info@promopixelstudio.com f in © PromoPixel Home AboutUs OurServices PrintingServies CV Services Our Portfolio tudio Elevate Your Career with the Ultimate CV From Blue Collar to...

Page Load Overview

2.53s
Total Load Time
3.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:10,386 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business79% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
79%
documentation technical
71%
adult content
40%
government public service
39%
corporate
35%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9160.153.0.23Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
5142.251.14.95Google · CDNUnited States
AS15169Google LLC
5147.45.37.168Russia
AS203273NetCrafters OU
562.115.253.105France
AS1299Arelion Sweden AB
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
562.115.253.99France
AS1299Arelion Sweden AB
523.67.142.207Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
5192.178.183.113Google · CDNUnited States
AS15169Google LLC
5142.251.152.119Google · CDNUnited States
AS15169Google LLC
5172.217.116.4Google · CDNUnited States
AS15169Google LLC
12925--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11E443B32B8992C3522AF028E5043378C74AED5F5E21285F4F6FA51186BEADE1736271D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:A7OIhG/aXf7NrSbgvs3xDEsWR2hnTJkXpTKrqU4Z:zkIqUI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:258048:LPolnNEBu3DNIYxiQAAKkwqFnnAQXV4QQlQAJAAIIBbgGEEDIAI4QISGlJGVgxKAkEXGToAkZkigABCBC2aESmMJwYJAFCwc

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7e7f3f1f0000003c
Perceptual Hash:92b5c27c922dc739
Difference Hash:ecfcfad894b7b1d5
Wavelet Hash:7f7f7f5f0200003c
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data