Security Report: tranquilacrestomahawk.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b0910aeb-ecce-460f-98a8-e2a20dc6e437 Domain and IP registration (RDAP)/api/v1/rdap/b0910aeb-ecce-460f-98a8-e2a20dc6e437 Certificate Transparency/api/v1/ct/tranquilacrestomahawk.com How often this domain was scanned/api/v1/domain/stats/tranquilacrestomahawk.com Scan history for this domain/api/v1/domain/history/tranquilacrestomahawk.com?limit=15

This website contacted 4 IPs in 2 countries across 7 domains to perform 27 HTTP transactions. The main domain is tranquilacrestomahawk.com and was registered 4 weeks ago.

Submitted URL: https://tranquilacrestomahawk.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate farm site has been compromised and now serves ClickFix fake-CAPTCHA clipboard malware, an injected WordPress loader and gambling SEO spam, pulling scripts from multiple malware-flagged domains.

Risk Factors (5)

ClickFix fake-CAPTCHA / clipboard pastejacking staging a PowerShell downloader from IP literal 185.100.157.126

Analyst-vetted malicious kit roster hits (ClickFix FakeCAPTCHA, ErrTraffic/Exvicy WordPress injected loader, Macfinger ClickFix stealer)

Injected gambling/SEO spam content unrelated to the site's stated purpose

Third-party domains flagged as malware (powershell injector, exploit kit) loaded by the page

Unranked attacker script hosts (poalmcreorvelvet.pro, rehearsal-b.com) contacted by page JavaScript

Domain age information unavailable

Details

Page Title

Tranquil Acres – Lavender & Produce in Tomahawk, WI

Scan Type

public

Favicon Hash

MMH3: -470705526

MD5: 2d2a45f9f41d47027f6591f3ac69484e

Domain Name Analysis

Domain 'tranquilacrestomahawk.com' uses the commercial generic top-level domain (.com). The second-level label 'tranquilacrestomahawk' is 21 characters long holding 8 vowels versus 13 consonants. Word splitting yields 3 words: tranquil, acres, tomahawk. Expect 8 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.94s

Total Load Time

669 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:898 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software86% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

86%

documentation technical

69%

phishing scam

48%

government public service

43%

adult content

42%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	74.208.236.37	United States	AS8560IONOS SE
6	142.250.154.95Google · CDN	United States	AS15169Google LLC
6	193.29.224.97	Helsinki, Uusimaa, Finland	AS210644Aeza Group LLC
6	104.21.95.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
27	4	-	-