Security Report: rainbowgymclub.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/762c4c2f-8ee7-4451-b6bd-81dd0c9d3530 Domain and IP registration (RDAP)/api/v1/rdap/762c4c2f-8ee7-4451-b6bd-81dd0c9d3530How often this domain was scanned/api/v1/domain/stats/rainbowgymclub.com Scan history for this domain/api/v1/domain/history/rainbowgymclub.com?limit=15

This website contacted 37 IPs in 3 countries across 22 domains to perform 166 HTTP transactions. The main domain is rainbowgymclub.com and was registered 9 years ago.

Submitted URL: https://rainbowgymclub.com

Effective URL:

https://www.rainbowgymclub.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 94%

Risk Score

Legitimate long-established gymnastics club site that has been compromised: YARA-confirmed ErrTraffic/Exvicy ClickFix WordPress loader, 6 CRITICAL EtherHiding malware-exfil IDS alerts and malicious clearfake loader domains. Do not visit.

Risk Factors (5)

Compromised WordPress site injecting an ErrTraffic/Exvicy ClickFix malware loader (YARA-confirmed)

CRITICAL network IDS alerts for EtherHiding malware exfiltration (x6)

Third-party resource domains flagged as malicious clearfake/loader infrastructure by 2-3 independent threat-intel feeds

Obfuscated dynamic code execution on a page that has no functional need for it (5 eval/fetch-executor calls, 2 Function() constructor calls) alongside a network sink

Web3 RPC endpoints being queried from a gymnastics club website — no legitimate business rationale

Domain age information unavailable

Details

Page Title

Rainbow Gymnastics – Dundonald – Rainbow Gymnastics In Dundonald Belfast is a high performance dedicated gymnastics facility for beginner to professionals. Based in our state of the art facility we are a fully inclusive club offering: Gymnastics, Parkor, Circus and Rythmic.

Scan Type

public

Favicon Hash

MMH3: -114584095

MD5: 9a6fc9dad2f5b869e2683ccb2f17a900

Domain Name Analysis

The domain 'rainbowgymclub.com' uses the commercial generic top-level domain (.com). Count 14 characters in 'rainbowgymclub' containing 4 vowels alongside ten consonants. Breaking it apart gives three words: rainbow, gym, club. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

75.09s

Total Load Time

5.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-GB

Text Length:5,629 chars

Detector Agreement:100%

Website Classification

Primary Category

education learning46% confidence

Type: spa

Method: ml+structural

All Detected Categories

education learning

46%

government public service

26%

news/blog

20%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
22	185.211.23.187	Larne, Northern Ireland, United Kingdom	AS205654Labtech Systems Ltd
4	142.251.110.95Google · CDN	United States	AS15169Google LLC
4	192.0.73.2	San Francisco, California, United States	AS2635Automattic, Inc
4	142.251.155.119Google · CDN	United States	AS15169Google LLC
4	142.251.14.101Google · CDN	United States	AS15169Google LLC
4	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.20.94Google · CDN	United States	AS15169Google LLC
4	142.251.152.4Google · CDN	United States	AS15169Google LLC
4	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.110.94Google · CDN	United States	AS15169Google LLC
166	37	-	-