Security Report: aacarrentals.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cf7d3ba5-643f-4640-a46b-53fe3914a9b0 Domain and IP registration (RDAP)/api/v1/rdap/cf7d3ba5-643f-4640-a46b-53fe3914a9b0 Certificate Transparency/api/v1/ct/aacarrentals.com How often this domain was scanned/api/v1/domain/stats/aacarrentals.com Scan history for this domain/api/v1/domain/history/aacarrentals.com?limit=15

This website contacted 17 IPs in 3 countries across 11 domains to perform 145 HTTP transactions. The main domain is aacarrentals.com and was registered 21 years ago.

Submitted URL: https://aacarrentals.com/

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Car-rental site is serving an injected ClickFix stealer/phishing kit: two CRITICAL YARA kit hits, fake 'Human Verification' overlay, AMOS loader and EtherHiding IDS alerts. Do not interact; malware risk is critical.

Risk Factors (5)

Known malicious ClickFix stealer/phishing kit injected into the page (YARA + roster confirmed)

Fake 'Human Verification' overlay instructing Windows users to open Terminal and paste attacker commands

Critical IDS alerts for AMOS ClickFix loader retrieval and EtherHiding exfiltration

Blockchain RPC connection (polygon mainnet) consistent with EtherHiding/dead-drop payload retrieval

Unranked external script host (poalmcreorvelvet.pro) beaconed to via sendBeacon

Domain age information unavailable

Details

Page Title

AA Motors- Car Rentals – Welcome to AA Motors – Your Trusted Rent A Car Service Across Pakistan

Scan Type

public

Favicon Hash

MMH3: 1641615345

MD5: 10f41ee805352c60363ecc25dd874a86

Domain Name Analysis

Domain 'aacarrentals.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'aacarrentals' stretches across 12 characters with five vowels and seven consonants. Word splitting yields 4 words: a, a, car, rentals. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.62s

Total Load Time

13.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:9,834 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service65% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

65%

adult content

58%

news media journalism

47%

blog personal website

40%

documentation technical

36%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	142.251.14.95Google · CDN	United States	AS15169Google LLC
8	193.29.224.97	Helsinki, Uusimaa, Finland	AS210644Aeza Group LLC
8	192.178.183.97Google · CDN	United States	AS15169Google LLC
8	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
8	34.160.17.71Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
8	99.84.152.37Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
8	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
8	142.251.14.94Google · CDN	United States	AS15169Google LLC
8	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
145	17	-	-