Security Report: sportorium.ptumb.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bc9643d9-f945-4ce1-a330-59d30f4dde06 Domain and IP registration (RDAP)/api/v1/rdap/bc9643d9-f945-4ce1-a330-59d30f4dde06How often this domain was scanned/api/v1/domain/stats/sportorium.ptumb.com Scan history for this domain/api/v1/domain/history/sportorium.ptumb.com?limit=15

This website contacted 10 IPs in 3 countries across 11 domains to perform 111 HTTP transactions. The main domain is ptumb.com and was registered 1 year 3 months ago.

Submitted URL: https://sportorium.ptumb.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Compromised venue site carrying injected ErrTraffic/Exvicy loader and a Windows ClickFix 'Human Verification' overlay that pushes a Win+X Terminal paste-and-run command, with critical EtherHiding exfil IDS alerts.

Risk Factors (5)

Injected Windows ClickFix overlay instructing visitors to paste and execute a command in Terminal (PowerShell) — direct malware delivery

ErrTraffic/Exvicy WordPress injection loader (Base64 blob XOR-decoded and run via new Function) in the page body

Critical network IDS alerts for EtherHiding exfiltration and a known ClickFix C2 domain

Cross-origin blockchain RPC calls typical of EtherHiding payload retrieval

Fake Cloudflare-style 'Human Verification' branding used to legitimise the terminal instructions

Domain age information unavailable

Details

Page Title

Home - sportorium - PT UMB

Scan Type

public

Domain Name Analysis

You're looking at domain 'sportorium.ptumb.com' on the commercial generic top-level domain (.com) and includes subdomain 'sportorium'. The registrable portion 'ptumb' spans 5 characters holding 1 vowel versus four consonants. Word splitting yields 2 words: pt, umb. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.46s

Total Load Time

1.7 MB

Total Size

Language Analysis

Primary Language

🇮🇩Indonesian

Code: id

Confidence:41%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:3,154 chars

Detector Agreement:75%

Language mismatch: Declared as en-US but detected as id

Website Classification

Primary Category

government public service77% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

77%

corporate business

72%

entertainment media

59%

real estate property

56%

education learning

52%

Detected Features

Articles

Comments

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	147.93.80.15	Jakarta, Jakarta, Indonesia	AS47583Hostinger International Limited
11	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	142.251.110.95Google · CDN	United States	AS15169Google LLC
11	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
11	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
11	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
11	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
11	142.251.14.94Google · CDN	United States	AS15169Google LLC
11	192.0.77.48	San Francisco, California, United States	AS2635Automattic, Inc
11	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
111	10	-	-