Security Scan Report: www.marquecreative.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 7 domains to perform 45 HTTP transactions. The main domain is marquecreative.com and was registered 18 years ago.

Submitted URL: https://www.marquecreative.com/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised site serving a roster-confirmed ClickFix/Win+X Terminal overlay plus an ErrTraffic/Exvicy WordPress injection; primary domain flagged as malware by multiple feeds. Do not interact.

Risk Factors (6)
Known malicious ClickFix overlay kit (Win+X / Terminal paste-and-run) injected into the page — YARA CRITICAL, roster-anchored
ErrTraffic/Exvicy WordPress injected loader with obfuscated base64 + XOR + new Function execution — YARA CRITICAL, roster-anchored
CRITICAL network IDS alerts for EtherHiding exfiltration and a ClickFix distribution domain (gateway.tenderly.co)
Multi-feed threat-intel malware classification of the primary domain (clearfake / unknown loader)
Blockchain RPC connections (polygon.gateway.tenderly.co, rpc-mainnet.matic.quiknode.pro, polygon-mainnet.public.blastapi.io) consistent with EtherHiding-style abuse of smart contracts for payload hosting
Casino/gambling spam content and injected SEO-spam keyword blocks on a 'creative' design domain
Domain age information unavailable

Details

Page Title

Casino Gaming Platforms and More! - Marque Creative

Scan Type

public

Domain Name Analysis

The domain 'www.marquecreative.com' uses the commercial generic top-level domain (.com) with subdomain 'www'. The core label 'marquecreative' covers 14 characters with seven vowels and 7 consonants. Splitting it apart reveals two words: marque, creative. Median word length is seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.marquecreative.com/

Page Load Overview

3.02s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:4,816 chars
Detector Agreement:75%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%
news/blog
40%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.110.95Google · CDNUnited States
AS15169Google LLC
5172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5132.145.155.63Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
535.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
5188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
458--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E553F7334315486A6B4697D4E038732D91D3C12BDD09A9FABBE941DDFB89DE300B2729

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:UjWWap2or8g1jVmguijM2Oa9CazsNMA1nMlhC3xY:zEorera9CazsNMA1nMvChY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:61732:UVoAWIAiYqwDqHIEDAaAQKBHAqpAES66moAwggYxATcwCCwCABFCh6EEmRwOIDIgBxZFESAUMKn1ArAA5QRADQBhDQ4MAIEA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff878787ffcf8f
Perceptual Hash:b066c9cf36364738
Difference Hash:30181c2c2cc01818
Wavelet Hash:007c860687ff8f8f
Color Hash:#2dd298

Scan History

Scan history not available

Unable to load historical scan data