Security Scan Report: mmgamingpal.com

Site favicon
Submitted: Completed: publiccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake 'bot verification' overlay instructing Windows users to paste a command into Terminal, backed by a ClickFix YARA hit, 19 EtherHiding IDS alerts and a dual-feed malware listing on the primary domain. Do not visit or run the command.

Risk Factors (5)
Known malicious ClickFix kit injected into the page content (fake verification overlay + Terminal paste instructions)
Primary domain listed as malware (iclickfix) by two independent threat-intelligence feeds
19 CRITICAL IDS alerts for EtherHiding exfiltration, consistent with a malicious loader using the page
Page content instructs visitors to run an attacker-supplied command in PowerShell/Terminal — the payload is a live malware execution step
Unranked domain (not in Cisco Umbrella top 1M) serving a marketplace facade while hosting a malicious kit
Domain age information unavailable

Details

Page Title

MM Gaming Pal — Hire Verified Myanmar Gamers

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'mmgamingpal.com' is registered. The core label 'mmgamingpal' covers 11 characters with 3 vowels and eight consonants. Tokenizing the label suggests three words: mm, gaming, pal. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mmgamingpal.com

Page Load Overview

4.68s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:5,507 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media80% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
80%
technology software
80%
e-commerce shopping
64%
cryptocurrency blockchain
48%
finance banking
44%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20172.67.144.103Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.110.95Google · CDNUnited States
AS15169Google LLC
4104.20.17.167Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.20.94Google · CDNUnited States
AS15169Google LLC
4146.75.122.208Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
418.172.112.72Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4142.251.127.84Google · CDNUnited States
AS15169Google LLC
43.41.202.156Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
4104.21.71.107Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
415.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
8818--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T147E3D6657306253C551BCBE5F6D2BF38912FE345EA47A468F26C02B29BCBCC86953780

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Yaebx/c64Jysq7v35AvbTYglN+mC5tf5t71c4susxJyC96Dtxiaddm:/exmHFtwFm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:149990:IOEyCARCHGKnsAFjAwAIo+RrQTyZwFPDS0RQgAGsYaBbIKYRDQAcYIIQotOiGIwCASAExBAAYsBkIRE4jBzCDwCAzAAEoBhg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:02191a383c3c181c
Perceptual Hash:8c2536d7876433dc
Difference Hash:d633327261392029
Wavelet Hash:021b1b3b3cbc9c9d
Color Hash:#d22d59

Other Hashes

Crop Resistant:d633327261392029

Scan History

Scan history not available

Unable to load historical scan data