Security Scan Report: 360s-travel.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 2 domains to perform 22 HTTP transactions. The main domain is 360s-travel.com and was registered 5 years ago.

Submitted URL: https://360s-travel.com

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

Compromised WordPress site serving the ClearFake EtherHiding loader: obfuscated JS pulls its next stage from a Polygon contract and contacts flagged RPC hosts. No forms, but malware exposure is high.

Risk Factors (6)
Known malicious kit (ClearFake Polygon/EtherHiding loader) injected into the page
Obfuscated script retrieving its payload server list from a blockchain contract
Obfuscated script contacting threat-feed-flagged RPC/polygon hosts (1rpc.io, polygon.drpc.org, polygon.publicnode.com)
Threat-intel match on the primary domain (malware loader, single-source/unverified)
Malicious third-party script resource (wp-elementor.com reported as wp inject)
Suricata javascript-obfuscator usage alerts consistent with the obfuscated loader
Domain age information unavailable

Details

Page Title

360s-travel – You Better Get Inside 360s-Travel.

Scan Type

public

Domain Name Analysis

The domain '360s-travel.com' uses the commercial generic top-level domain (.com). The second-level label '360s-travel' is 11 characters long holding two vowels versus five consonants; bonus characters include 3 digits and 1 hyphen. Word splitting yields 3 words: 360, s, travel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Saturday, October 17, 2026 360s-travel [sm [1] You Better Get Inside 360s-Travel. HOME | ABOUT US | COOKIE POLICY | TERMS OF USE | CONTACT 38 Random News Nothing Found It seems we carit find wha...

Page Load Overview

1.79s
Total Load Time
370 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:437 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism75% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

news media journalism
75%
technology software
49%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
894.23.76.107France
AS16276OVH SAS
7104.21.66.243Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7172.67.210.2Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
223--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DE236C3112941472378F87E5A22371E9F99EB938CD0552ABF1B2712859C5CB392E3A3D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:2g0ZZdapSTFV/uNBgTxkG0OXS9m50b3g0UPP2Yr9l5aI6krkJFm8dt93+tAjzJyc:2HapG/zEQTwztEEWNqyJdk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:45799:CU2CJoCF3AAo4AtAEJUhylFoYSUyAMqhSvKBgErQEBKB0Y4gFgQIOGLiIAQRoUYhFsKQBwRYjhMOBA0CComBBOEHACBiQ62j

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffbff0000ffffff
Perceptual Hash:8f0faf501296b70d
Difference Hash:69734031b2000000
Wavelet Hash:38001f0000ffffff
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data