Security Report: security.packt.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ed3bd528-b447-4d87-9139-bb871642358c Domain and IP registration (RDAP)/api/v1/rdap/ed3bd528-b447-4d87-9139-bb871642358cHow often this domain was scanned/api/v1/domain/stats/security.packt.com Scan history for this domain/api/v1/domain/history/security.packt.com?limit=15

This website contacted 31 IPs in 4 countries across 20 domains to perform 245 HTTP transactions. The main domain is packt.com and was registered 27 years ago.

Submitted URL: https://security.packt.com/

The Cisco Umbrella rank of the primary domain is #586,745 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Legitimate Packt SecPro site appears compromised: page loads a ClickFix FakeCAPTCHA malware kit from kjhg.lol, triggering multiple CRITICAL IDS and threat-intel alerts. Avoid the page until cleaned.

Risk Factors (4)

Known malicious ClickFix FakeCAPTCHA kit detected in page markup (YARA: Detect_ClickFix_FakeCaptcha_LOLBin)

Multiple CRITICAL IDS exploit-kit and malware alerts on the page and its DNS/TLS traffic

Malicious script host kjhg.lol (reported as hermes malware) loaded by the page

Outbound link to swingerwives.com, tagged IClickFix on ThreatFox

Domain age information unavailable

Details

Page Title

Home - Packt SecPro

Scan Type

public

Favicon Hash

MMH3: -835849114

MD5: c8f7b1be0e4d7dbb08aa7dddac0a1941

Domain Name Analysis

Domain 'security.packt.com' uses the commercial generic top-level domain (.com) with subdomain 'security'. The registrable portion 'packt' spans 5 characters holding 1 vowel versus four consonants. Breaking it apart gives two words: pack, t. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.23s

Total Load Time

2.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:2,382 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software88% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

88%

cryptocurrency blockchain

80%

documentation technical

63%

corporate

35%

education learning

27%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
35	104.18.14.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	142.251.14.95Google · CDN	United States	AS15169Google LLC
7	104.21.27.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	142.251.20.97Google · CDN	United States	AS15169Google LLC
7	172.64.150.56Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
7	20.250.198.32Azure · CLOUD	Zurich, Zurich, Switzerland	AS8075Microsoft Corporation
7	18.66.102.53Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
7	142.251.14.94Google · CDN	United States	AS15169Google LLC
7	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
245	31	-	-