Security Scan Report: ledpro.solutions

Redirected to:
https://www.ledpro.solutions/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 7 domains to perform 130 HTTP transactions. The main domain is ledpro.solutions and was registered 1 year 6 months ago.

Submitted URL: https://ledpro.solutions

Effective URL:
https://www.ledpro.solutions/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate-looking LED lighting site that has been compromised: it injects a ClickFix fake 'Human Verification' overlay and EtherHiding malware, with the primary domain flagged as clearfake malware by multiple feeds. Do not visit.

Risk Factors (5)
Known malicious ClickFix (Win+X → Terminal) fake 'Human Verification' overlay injected into the page
Primary domain flagged as clearfake malware by multiple corroborated threat feeds
CRITICAL IDS alerts for ClickFix C2 domain and EtherHiding exfiltration (x4)
Blockchain RPC hosts (polygon.gateway.tenderly.co, 1rpc.io, polygon-public.nodies.app) contacted by page scripts — consistent with EtherHiding/blockchain-based payload retrieval
Injected casino/gambling SEO spam content on an unrelated lighting-business page
Domain age information unavailable

Details

Page Title

Home - LED Pro Solutionsother network

Scan Type

public

Domain Name Analysis

Within the .solutions top-level domain, 'ledpro.solutions' is registered. The core label 'ledpro' covers 6 characters holding 2 vowels versus 4 consonants. Tokenizing the label suggests two words: led, pro. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ledpro.solutions

Page Load Overview

5.17s
Total Load Time
21.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:20,575 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service47% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
47%
documentation technical
38%
forum
35%
corporate
35%
social_media
25%

Detected Features

Search
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22136.243.167.85Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
1835.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
18104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
18178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
18188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
18172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
18188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1307--

Detected Technologies8

WordPressv6.8.1
100%
JQueryv3.7.1
100%
50%
35%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16394E62173511939222F43DFE157BB0C60D7CAA7E89966E8F6FF0054A3E5EC03693296

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:qoVwNH94x9L0KYLYQYmH4sOynkn+gnvOW68vo0qA/CbOo8kxKTIBwueVG+T2dTw7:7+NdrKYLYQYmHHiV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:421323:MWgQYQoy1cFwEKJEhyGA1iCAJCEgCQOCScIYEkQgzhZb3ESQQlARcZUAMeFmGHAhREcNE+CUVGLQAYIQRKqD4CBXiS5LQKcB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00020e4e6b0f0f0f
Perceptual Hash:b14d7ee56ad20989
Difference Hash:21161ad8dadafc29
Wavelet Hash:81060e6f6f2f0f0f
Color Hash:#ac536b

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data