Security Scan Report: kidzwonderlandllc.com

Submitted: Completed: publiccompleted
This website contacted 12 IPs in 4 countries across 12 domains to perform 30 HTTP transactions. The main domain is kidzwonderlandllc.com and was registered 8 years ago.

Submitted URL: https://kidzwonderlandllc.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Compromised longstanding domain now serving the Macfinger ClickFix AMOS stealer: kit-roster, CRITICAL YARA and CRITICAL IDS alerts, plus malware-flagged hosts hidden in obfuscated scripts. Do not interact.

Risk Factors (4)
Known malicious ClickFix/AMOS stealer kit served from the page (kit roster + YARA + IDS)
Threat-feed malware hosts concealed inside obfuscated JavaScript
Cross-origin beacon/fetch calls to unranked tracker and campaign domains
Long-established domain now hosting unrelated casino/SEO spam content (content mismatch indicating compromise)
Domain age information unavailable

Details

Page Title

kidzwonderlandllc

Scan Type

public

Domain Name Analysis

You're looking at domain 'kidzwonderlandllc.com' on the commercial generic top-level domain (.com) and has no subdomain. Count 17 characters in 'kidzwonderlandllc' split between four vowels and 13 consonants. Breaking it apart gives 4 words: kid, z, wonderland, llc. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://kidzwonderlandllc.com

Page Load Overview

1.29s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:5,404 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting92% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
92%
education learning
82%
adult content
79%
entertainment media
76%
corporate business
63%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
892.113.23.113Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
2142.251.14.95Google · CDNUnited States
AS15169Google LLC
2193.29.224.97Helsinki, Uusimaa, Finland
AS210644Aeza Group LLC
2185.92.183.208Riga, Riga, Latvia
AS56971Cgi Global Limited
2192.178.183.94Google · CDNUnited States
AS15169Google LLC
2104.21.8.153Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
2142.251.127.84Google · CDNUnited States
AS15169Google LLC
23.167.230.19Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
292.113.16.21Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
3012--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F3B3F970E790197A367743BDE556BA087A294A23DA4E67E5F0FEC19852C5FA300F130E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:lk+SuWagOap3KRT5SHGKHKLHM9HUbH514HdLHnj8BP846T81Ei:8Bp05Ei

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:111190:YpSJRnBIhEBqHSAgAACIgDiQRBgDhEI0iaFiBcRIAAUiwZLBQFQCGDGgHRnFDAoSZEQpZKYDe8AoE4zAEBAF3DhAxKAAUAFh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9f0e1c3e3e1c3e1c
Perceptual Hash:96bdbcbcac863890
Difference Hash:2e48fcc4f8ecc8ec
Wavelet Hash:9f3c1c3e3c1c7c0c
Color Hash:#8c40bf

Other Hashes

Crop Resistant:2e48fcc4f8ecc8ec

Scan History

Scan history not available

Unable to load historical scan data