Security Scan: disshops

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/da8394f8-97c6-4f82-adf2-fcd8c7e670b1 Domain and IP registration (RDAP)/api/v1/rdap/da8394f8-97c6-4f82-adf2-fcd8c7e670b1 Certificate Transparency/api/v1/ct/salla-gcc.com How often this domain was scanned/api/v1/domain/stats/salla-gcc.com Scan history for this domain/api/v1/domain/history/salla-gcc.com?limit=15

This website contacted 20 IPs in 2 countries across 15 domains to perform 215 HTTP transactions. The main domain is salla-gcc.com and was registered 1 week ago.

Submitted URL: https://salla-gcc.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Confirmed malicious: compromised WordPress page hosts an analyst-vetted ClickFix FakeCAPTCHA (LOLBin) kit with YARA and CRITICAL EtherHiding malware IDS hits, plus a malware-flagged domain loader — do not visit.

Risk Factors (7)

ClickFix FakeCAPTCHA LOLBin kit (analyst-vetted, CRITICAL) present in page HTML

Two high-precision YARA rule hits for Detect_ClickFix_FakeCaptcha_LOLBin

IDS CRITICAL alert: ET MALWARE EtherHiding Exfil M2

Blockchain RPC connections (polygon-bor-rpc.publicnode.com) consistent with EtherHiding/loader exfiltration

Primary domain flagged in threat intel as 'unknown loader (malware)'

Malware-flagged loaded resource checkmybtrobot.cc (iclickfix, 2 feeds)

Compromised WordPress site serving casino/gambling SEO spam in multiple languages

Domain age information unavailable

Details

Page Title

disshops

Scan Type

public

Domain Name Analysis

Domain 'salla-gcc.com' uses the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'salla-gcc' stretches across 9 characters containing two vowels alongside 6 consonants; bonus characters include one hyphen. Segmentation suggests 4 words: s, all, a, gcc. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

90.13s

Total Load Time

1.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:40%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:ar

Text Length:3,552 chars

Detector Agreement:100%

Language mismatch: Declared as ar but detected as en

Website Classification

Primary Category

gambling betting81% confidence

Type: spa

Method: ml+structural

All Detected Categories

gambling betting

81%

technology software

76%

entertainment media

72%

education learning

44%

adult content

34%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
25	162.159.134.42Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	192.178.183.97Google · CDN	United States	AS15169Google LLC
10	104.21.38.103Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	3.163.248.4Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
10	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
10	23.36.162.82Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
10	35.190.43.134Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
215	20	-	-