Security Scan Report: protego360.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 3 countries across 5 domains to perform 17 HTTP transactions. The main domain is protego360.com and was registered 2 years 7 months ago.

Submitted URL: https://protego360.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised Protego 360 site injected with a ClickFix/EtherHiding kit: a fake Cloudflare 'Human Verification' overlay and blockchain-hosted loader push Terminal paste-commands to Windows visitors. Confirmed malicious.

Risk Factors (6)
Compromised legitimate site (protego360.com, 936 days old) serving an injected ClickFix social-engineering kit to Windows visitors
Fake Cloudflare 'Human Verification' overlay instructing visitors to open Terminal and paste attacker-supplied commands
EtherHiding: obfuscated script retrieves its next-stage payload address from a Polygon blockchain smart contract, hiding attacker infrastructure
Threat-feed hosts (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co) concealed inside obfuscated JavaScript, exposed only after decoding
Primary domain Indicators of Compromise hit for malware (unknown loader) plus CRITICAL/HIGH IDS malware and exploit-kit alerts
Page text contains an unrelated injected string ('pour l'IA sans censure'), consistent with attacker-injected content on a compromised site
Domain age information unavailable

Details

Page Title

PROTEGO 360°

Scan Type

public

Domain Name Analysis

The domain name 'protego360.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'protego360' stretches across 10 characters with 3 vowels and four consonants, plus 3 digits. Word splitting yields three words: prot, ego, 360. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://protego360.com

Page Load Overview

2.16s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:699,260 chars
Detector Agreement:67%

Website Classification

Primary Category

gambling betting97% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
97%
finance banking
81%
healthcare medical
79%
adult content
78%
entertainment media
67%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7109.228.34.174United Kingdom
AS8560IONOS SE
2104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
235.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
2172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
176--

Detected Technologies4

WordPressv7.1.3
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1186509B7D76182502B5B0298DD7735867A5FB4F9B74B82F8F13D8231A182EC5C21AB34

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:IjWrjGzSvc+ZKhcZDnZbIi2eyby6UZaznpoR08cm/FHiZWYDMDt4PjvEQjZ+ih56:Ees07UUprC0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1519351:IkAjBao4weYYBPEgawMQA3wiXMsJmFAEQkBSEMB6IRlI+cGC4HSOiThKYEShgBqkQAcAgAHBiUSARgpUcJBNNQrgQRYMoir4

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9f03030303030303
Perceptual Hash:add8d8d8dcd89898
Difference Hash:23c7260717870706
Wavelet Hash:ff03134303632b9f
Color Hash:#9f53ac

Other Hashes

Crop Resistant:23c7260717870706

Scan History

Scan history not available

Unable to load historical scan data