Security Scan: Randhawa Motors

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/87380694-c741-46ab-a886-2809325ac23c Domain and IP registration (RDAP)/api/v1/rdap/87380694-c741-46ab-a886-2809325ac23cHow often this domain was scanned/api/v1/domain/stats/randhawamotors.co Scan history for this domain/api/v1/domain/history/randhawamotors.co?limit=15

This website contacted 5 IPs in 3 countries across 4 domains to perform 14 HTTP transactions. The main domain is randhawamotors.co and was registered 2 years ago.

Submitted URL: https://randhawamotors.co

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate-looking motors site is compromised: hidden SEO-spam gambling links plus an analyst-vetted Macfinger ClickFix AMOS stealer loader (YARA hit + CRITICAL IDS alert). Avoid interaction.

Risk Factors (5)

Analyst-vetted CRITICAL stealer kit roster match (Macfinger ClickFix, 2 sightings)

HIGH-precision YARA rule ClickFix_BotProtection_Loader matched in page body

CRITICAL Suricata IDS alert for AMOS ClickFix loader request

Compromised site injecting hidden SEO-spam gambling links and off-topic casino content

Unranked external script host contacted via sendBeacon (poalmcreorvelvet.pro)

Domain age information unavailable

Details

Page Title

Randhawa Motors

Scan Type

public

Domain Name Analysis

Within the Colombian country-code top-level domain (.co), 'randhawamotors.co' is registered while skipping any subdomain. The second-level label 'randhawamotors' is 14 characters long holding 5 vowels versus 9 consonants. Tokenizing the label suggests four words: rand, haw, a, motors. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.99s

Total Load Time

172 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:4,437 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical86% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

healthcare medical

86%

gambling betting

84%

finance banking

83%

entertainment media

64%

education learning

63%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	92.113.23.97	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
2	142.251.110.95Google · CDN	United States	AS15169Google LLC
2	193.29.224.97	Helsinki, Uusimaa, Finland	AS210644Aeza Group LLC
2	142.251.20.94Google · CDN	United States	AS15169Google LLC
2	92.113.16.75	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
14	5	-	-