Security Scan: moncler-outletjackets.us.com

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ef6ae2d8-a4f4-4f5a-ac0c-3d5cb4e2e3a2 Domain and IP registration (RDAP)/api/v1/rdap/ef6ae2d8-a4f4-4f5a-ac0c-3d5cb4e2e3a2How often this domain was scanned/api/v1/domain/stats/moncler-outletjackets.us.com Scan history for this domain/api/v1/domain/history/moncler-outletjackets.us.com?limit=15

This website contacted 6 IPs in 2 countries across 4 domains to perform 18 HTTP transactions. The main domain is us.com and was registered 33 years ago.

Submitted URL: https://moncler-outletjackets.us.com/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised WordPress host serving a ClickFix fake 'Cloudflare verification' overlay that tricks Windows users into pasting a Terminal command, with payload fetched via a Polygon smart contract (EtherHiding). Multiple malicious-kit, ThreatFox and Safe Browsing hits.

Risk Factors (6)

ClickFix fake human-verification overlay delivering a Windows Terminal paste-to-execute payload

EtherHiding: next-stage payload address resolved from a blockchain smart contract (anti-takedown)

Heavily obfuscated injected script hiding threat-feed hosts (1rpc.io, polygon.drpc.org, tenderly gateways)

Known malicious clickfix-winx-overlay-2026-10 kit on a domain whose name has no relation to the content

Threat-intel matches on the primary domain, URL, a loaded script host and a resolved resource IP

Google Safe Browsing Unwanted Software and two CRITICAL ET MALWARE network alerts

Domain age information unavailable

Details

Page Title

moncler-outletjackets.us.com

Scan Type

public

Favicon Hash

MMH3: -2037126173

MD5: c7f978e2e7040799de6c53be78649c00

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'moncler-outletjackets.us.com' is registered, featuring subdomain 'moncler-outletjackets'. The registrable portion 'us' spans 2 characters holding 1 vowel versus 1 consonant. Splitting it apart reveals 1 word: us. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.48s

Total Load Time

1.0 MB

Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese

Code: vi

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:vi

Text Length:2,717 chars

Detector Agreement:75%

Website Classification

Primary Category

government public service96% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

government public service

96%

education learning

91%

corporate business

81%

real estate property

77%

adult content

60%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
3	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
3	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
18	6	-	-