Security Report: www.dekor.ba - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/99c029c9-89b7-494f-aeb3-b9835f5fd122 Domain and IP registration (RDAP)/api/v1/rdap/99c029c9-89b7-494f-aeb3-b9835f5fd122How often this domain was scanned/api/v1/domain/stats/dekor.ba Scan history for this domain/api/v1/domain/history/dekor.ba?limit=15

This website contacted 6 IPs in 3 countries across 6 domains to perform 25 HTTP transactions. The main domain is dekor.ba.

Submitted URL: https://www.dekor.ba

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate 12-year-old construction company site that has been compromised: it serves the Macfinger ClickFix macOS stealer (kit-roster + YARA CRITICAL, two CRITICAL IDS alerts) via an unranked attacker host, plus injected gambling SEO spam.

Risk Factors (5)

Known malicious kit on page: Macfinger ClickFix loader (CRITICAL macOS AMOS stealer), confirmed by byte-identical content match and YARA

YARA rule ClickFix_BotProtection_Loader matched in page HTML (CRITICAL stealer first stage)

Two CRITICAL IDS alerts for the AMOS ClickFix campaign loader request

Unranked script host thistle-godbriaum.pro receives beacon data from the page

Injected gambling/casino SEO spam links unrelated to the site's stated business indicate the site has been compromised

Domain age information unavailable

Details

Page Title

GD Dekor MB | Završni radovi u građevinarstvu

Scan Type

public

Favicon Hash

MMH3: 1978645187

MD5: 5134e5f61dcc138e6697aba55b1ff017

Domain Name Analysis

Within the Bosnian country-code top-level domain (.ba), 'www.dekor.ba' is registered with subdomain 'www'. The second-level label 'dekor' is 5 characters long with 2 vowels and three consonants. Tokenizing the label suggests two words: dek, or. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.23s

Total Load Time

786 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:17%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:bs-BA

Text Length:2,933 chars

Detector Agreement:50%

Language mismatch: Declared as bs-BA but detected as en

Website Classification

Primary Category

gambling betting90% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

gambling betting

90%

technology software

86%

finance banking

76%

entertainment media

69%

government public service

64%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	46.101.174.91	Frankfurt am Main, Hesse, Germany	AS14061DigitalOcean, LLC
4	142.251.110.95Google · CDN	United States	AS15169Google LLC
4	138.124.58.241	Paris, Île-de-France, France	AS210644Aeza Group LLC
4	142.251.13.94Google · CDN	United States	AS15169Google LLC
4	162.247.243.39Fastly · CDN	United States	AS54113Fastly, Inc.
4	162.247.243.29Fastly · CDN	United States	AS54113Fastly, Inc.
25	6	-	-