Security Report: portline-express.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8fd3c64f-db3e-4dd9-b591-6756782e4a3d Domain and IP registration (RDAP)/api/v1/rdap/8fd3c64f-db3e-4dd9-b591-6756782e4a3dHow often this domain was scanned/api/v1/domain/stats/portline-express.com Scan history for this domain/api/v1/domain/history/portline-express.com?limit=15

This website contacted 19 IPs in 3 countries across 19 domains to perform 217 HTTP transactions. The main domain is portline-express.com and was registered 7 months ago.

Submitted URL: https://portline-express.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Compromised legitimate-looking logistics site. 17 CRITICAL EtherHiding malware-exfiltration IDS alerts, active BSC RPC abuse, and a malware-loader flag on the primary domain indicate blockchain-hosted malware delivery. Avoid.

Risk Factors (4)

Network IDS flags repeated critical EtherHiding malware exfiltration traffic from the page

Page loads scripts that query BSC/BNB testnet RPC endpoints used to retrieve malicious payloads

Primary domain is itself flagged as a malware loader

Legitimate logistics façade appears to be a compromised site hosting injected malicious JavaScript

Domain age information unavailable

Details

Page Title

Portline- Express – Premium Global Logistics

Scan Type

public

Favicon Hash

MMH3: 1955645563

MD5: 4bfdece3cf4f394e53247135ce9ceb27

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'portline-express.com' is registered. Count 16 characters in 'portline-express' containing five vowels alongside 10 consonants; it also includes 1 hyphen. Splitting it apart reveals three words: port, line, express. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

23.95s

Total Load Time

11.6 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:7,761 chars

Detector Agreement:100%

Website Classification

Primary Category

social media network94% confidence

Type: spa

Method: ml+structural

All Detected Categories

social media network

94%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
19	65.108.123.218	Helsinki, Uusimaa, Finland	AS24940Hetzner Online GmbH
11	142.250.154.95Google · CDN	United States	AS15169Google LLC
11	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
11	104.18.11.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
11	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	52.223.48.152Aws · CLOUD	United States	AS16509Amazon.com, Inc.
11	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
11	79.127.216.204Datacamp · CDN	Frankfurt am Main, Hesse, Germany	AS60068Datacamp Limited
217	19	-	-