Security Report: moon-vtc.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5bc32741-ddf4-4507-ad65-34ec12f5539c Domain and IP registration (RDAP)/api/v1/rdap/5bc32741-ddf4-4507-ad65-34ec12f5539cHow often this domain was scanned/api/v1/domain/stats/moon-vtc.com Scan history for this domain/api/v1/domain/history/moon-vtc.com?limit=15

This website contacted 34 IPs in 3 countries across 19 domains to perform 367 HTTP transactions. The main domain is moon-vtc.com and was registered 6 years ago.

Submitted URL: https://moon-vtc.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Established VTC site compromised and injected with the ClickFix Win+X/Terminal 'Human Verification' overlay kit and an EtherHiding Polygon-contract loader; CRITICAL YARA, kit-roster and IDS hits plus injected casino SEO spam.

Risk Factors (6)

Compromised site serving the ClickFix 'Human Verification' Terminal overlay kit (CRITICAL, roster-anchored)

EtherHiding blockchain-based second-stage loader reading host address from a Polygon contract

Multiple CRITICAL/HIGH network IDS alerts for ClickFix, EtherHiding exfiltration and exploit-kit activity

Threat-intel match (single-source, unverified) on the primary domain moon-vtc.com as an 'unknown loader'

Obfuscated injected JavaScript with hidden threat-feed hosts and an unranked third-party script host

Injected gambling/casino SEO spam unrelated to the legitimate VTC content

Domain age information unavailable

Details

Page Title

Moon VTC – Private Driver VTC Strasbourg

Scan Type

public

Favicon Hash

MMH3: -1054040236

MD5: ca432a96d02b94f8adb487c342cdadc7

Domain Name Analysis

You're looking at domain 'moon-vtc.com' on the commercial generic top-level domain (.com). The second-level label 'moon-vtc' is 8 characters long split between two vowels and 5 consonants; it also includes one hyphen. It segments into three words: moon, vt, c. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.86s

Total Load Time

6.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:16,142 chars

Detector Agreement:50%

Website Classification

Primary Category

gambling betting98% confidence

Type: spa

Method: ml+structural

All Detected Categories

gambling betting

98%

cryptocurrency blockchain

73%

entertainment media

32%

news/blog

20%

forum

20%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
37	146.59.209.152	France	AS16276OVH SAS
10	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	104.21.27.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	172.217.118.4Google · CDN	United States	AS15169Google LLC
10	54.192.35.57Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
10	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
10	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
10	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
367	34	-	-