Security Scan: Danaba Group

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8046b8c9-cacd-4b88-a1e8-ea8e73d03728 Domain and IP registration (RDAP)/api/v1/rdap/8046b8c9-cacd-4b88-a1e8-ea8e73d03728How often this domain was scanned/api/v1/domain/stats/danabagroup.com Scan history for this domain/api/v1/domain/history/danabagroup.com?limit=15

This website contacted 9 IPs in 3 countries across 8 domains to perform 136 HTTP transactions. The main domain is danabagroup.com and was registered 3 years 3 months ago.

Submitted URL: https://danabagroup.com

Effective URL:

https://www.danabagroup.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Compromised legitimate domain serving a ClearFake/EtherHiding ClickFix chain: fake Cloudflare 'I'm not a robot' check copies a hidden PowerShell command to the clipboard. Never press Win+R or paste. High risk of malware infection.

Risk Factors (7)

ClearFake/EtherHiding malware kit identified by analyst-vetted kit roster

ClickFix clipboard injection staging a hidden-window PowerShell download-and-execute command

Fake Cloudflare 'human verification' interstitial impersonating Cloudflare to social-engineer Win+R paste execution

Obfuscated blockchain-RPC loader resolving payload servers from a Polygon smart contract

Four CRITICAL IDS alerts for EtherHiding exfiltration and threat-intel hits on loaded resources (cloud-browse.codes, vercel.app ClickFix host)

Anti-analysis defenses: DevTools and right-click blocking

Injected SEO spam gambling text (Andrew Tate Casino, casinoly, bananzia, Gold Crown Casino, wildsino, rivo) indicating a compromised/spam-injected CMS

Domain age information unavailable

Details

Page Title

Danaba Group

Scan Type

public

Favicon Hash

MMH3: -1219108092

MD5: 4e2e5c02a32b8f7ba9ac20109802c462

Domain Name Analysis

Domain 'danabagroup.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'danabagroup' stretches across 11 characters containing five vowels alongside 6 consonants. It segments into 3 words: dana, ba, group. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.45s

Total Load Time

1.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-GB

Text Length:1,763 chars

Detector Agreement:100%

Website Classification

Primary Category

gambling betting77% confidence

Type: spa

Method: ml+structural

All Detected Categories

gambling betting

77%

documentation technical

66%

entertainment media

56%

government public service

37%

blog personal website

32%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
16	46.30.213.135	Copenhagen, Capital Region, Denmark	AS51468One.com A/S
15	195.47.247.17	Denmark	AS51468One.com A/S
15	74.125.29.95Google · CDN	United States	AS15169Google LLC
15	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	142.251.13.94Google · CDN	United States	AS15169Google LLC
15	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
15	195.47.247.16	Denmark	AS51468One.com A/S
15	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	142.251.127.101Google · CDN	United States	AS15169Google LLC
136	9	-	-