ScanMalware.com

Security Scan Report: lot204.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/616e2944-3cc0-474b-8169-6cf4c2b6cb2aDomain and IP registration (RDAP)/api/v1/rdap/616e2944-3cc0-474b-8169-6cf4c2b6cb2aHow often this domain was scanned/api/v1/domain/stats/lot204.comScan history for this domain/api/v1/domain/history/lot204.com?limit=15
This website contacted 11 IPs in 1 country across 9 domains to perform 58 HTTP transactions. The main domain is lot204.com and was registered 26 years ago.

Submitted URL: https://lot204.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Legitimate-looking LOT204 Creative agency page that has been compromised: it serves an IClickFix/EtherHiding loader pulling a next stage from a blockchain contract and contacting ClickFix domain zvh4.com, confirmed by critical IDS alerts and the kit roster. Do not visit.

Risk Factors (5)
Compromised page injects a ClickFix / EtherHiding malware loader for visitors
Obfuscated script decoding blockchain-hosted payload address (Ethereum Sepolia) to evade takedown
Network traffic to ClickFix payload domain zvh4.com observed in DNS and TLS SNI
Hidden threat-feed hosts (0xrpc.io, 1rpc.io, gateway.tenderly.co) concealed inside encoded script
Page calls out to ethereum-sepolia-public.nodies.app as part of the EtherHiding chain
Domain age information unavailable

Details

Page Title

Home Page - LOT204 Creative

Scan Type

public

Domain Name Analysis

You're looking at domain 'lot204.com' on the commercial generic top-level domain (.com) with no subdomain. Count 6 characters in 'lot204' containing 1 vowel alongside 2 consonants; it also includes 3 digits. Word splitting yields two words: lot, 204. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

BS LoT204 You Can Call Us YourBrand Mechanics. BRANDING * MARKETING ¢ DESIGN

Page Load Overview

13.50s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:919 chars
Detector Agreement:75%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8144.208.64.61United States
AS22611InMotion Hosting, Inc.
5142.251.110.97Google · CDNUnited States
AS15169Google LLC
5172.64.147.188Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.14.95Google · CDNUnited States
AS15169Google LLC
5104.16.139.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5216.239.32.36Google · CDNUnited States
AS15169Google LLC
5142.251.127.94Google · CDNUnited States
AS15169Google LLC
5104.18.40.68Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.16.140.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5811--

Detected Technologies18

X-UA-Compatible
100%
WordPressv6.6.11
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
Bootstrapv1.7.18
100%
PHP
50%
MySQL
50%
All in One SEOv4.8.1.1
50%
Nginxv1.31.8
40%
HubSpot CMS
35%
Google Analytics
35%
Yoast SEOv24.9
30%
Beaver Builder
30%
jQuery Migrate
20%
imagesLoaded
20%
MonsterInsights
20%
All in One SEO Packv4.8.1.1
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T150632BB2368C6837021760C5B53D7E1C539A9932EA42CCE7BAFD435C57D2ED68886623

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:hF7d9JoeASG4errAfNbri46aeDg5CLLz3Q5IfuK5LUCPwsdm4S4E:hRdkeC4errAlbri46JLQ5IfuK5LUCPw5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:67342:DxASBHhGaJKiIqAKxAmBCjBABIZCYFAgSAPTAwTJWUYACQM0KAPhQgCYwmuBQQEnE9EF+ScQYjogMAjwjMBmRVRBBcwTKgVg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000010000001ff
Perceptual Hash:a859f123d80ef563
Difference Hash:95d0303355176b0e
Wavelet Hash:ff788899018303ff
Color Hash:N/A

Other Hashes

Crop Resistant:95d0303355176b0e,95d2583231d7076b

Scan History

Scan history not available

Unable to load historical scan data