Security Scan Report: www.strongboxsecurityservices.com

Submitted: Completed: publiccompleted
This website contacted 27 IPs in 3 countries across 21 domains to perform 79 HTTP transactions. The main domain is strongboxsecurityservices.com and was registered 8 years ago.

Submitted URL: https://www.strongboxsecurityservices.com

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Established security-guard firm whose site shows a compromised ClearFake/EtherHiding infection: primary domain and hosting IP flagged for malware plus 5 CRITICAL EtherHiding IDS alerts. No forms, no impersonation — do not interact.

Risk Factors (5)
Multi-feed malware threat-intel match on the PRIMARY domain (ClearFake)
Hosting IP flagged as 'ek clearfake' by two independent feeds
Five CRITICAL IDS alerts for EtherHiding exfiltration (malware C2 over blockchain)
Off-site blockchain RPC / Ethereum contract traffic (wallet-drainer–style C2 pattern) with no legitimate reason on a security-guard marketing site
Third-party resource on malicious host checkyoubrowse.codes
Domain age information unavailable

Details

Page Title

Security Services: Commercial & Corporate Security Guard Services

Scan Type

public

Domain Name Analysis

Domain 'www.strongboxsecurityservices.com' uses the commercial generic top-level domain (.com) with subdomain 'www'. The second-level label 'strongboxsecurityservices' is 25 characters long split between eight vowels and 17 consonants. Word splitting yields three words: strongbox, security, services. Average segment length settles at eight characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.strongboxsecurityservices.com

Page Load Overview

42.72s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:10,721 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical59% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
59%
adult content
38%
corporate
35%
corporate business
33%
government public service
31%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
27151.101.2.159Fastly · CDNUnited States
AS54113Fastly, Inc.
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
2192.178.183.97Google · CDNUnited States
AS15169Google LLC
2104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
268.70.204.1Switzerland
AS44239proinity GmbH
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2216.239.34.36Google · CDNUnited States
AS15169Google LLC
7927--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T104C3D7A33655813E568F84CF412FB61E60F9C588EE5166D4FAF4813BF1B4DA03272768

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:7g2Fie+V7ZeI1Bm1MjTYV7dDD6Rqx31NRdvubS+qpKJA5P1GXYH9:7q5m7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:124074:BATIBBBOAKEqBhawBsAYtKQI5NBqwA5EBBBOAgEQEITzw5HogNwkM5UBAgQo4gNAxQcNoS0zQAAAkAiAngBAlQIkKAeRMUjJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe46c3c00000080
Perceptual Hash:d2d3f4b49dd4d401
Difference Hash:84c8c878f9ae9626
Wavelet Hash:fffe7c3e000000fb
Color Hash:#9340bf

Scan History

Scan history not available

Unable to load historical scan data