Security Scan Report: www.montech-institute.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 22 IPs in 3 countries across 20 domains to perform 76 HTTP transactions. The main domain is montech-institute.com and was registered 5 years ago.

Submitted URL: https://www.montech-institute.com

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Legitimate-looking Montech Institute application form whose page loads ClearFake exploit-kit and macOS-malware domains and shows 15 CRITICAL EtherHiding exfiltration alerts; Safe Browsing flags unwanted software. Treat as a compromised malware-serving site.

Risk Factors (6)
Critical IDS malware alerts (EtherHiding exfiltration, 15 CRITICAL) on this page's traffic
Third-party resources from ClearFake exploit-kit domains (mon-blanc-02.cfd, fri-dod-01.cfd, nikogdatakonebilo.cc)
Third-party resources from macOS malware domains (cosmical2049.com, mlroweb.com)
Safe Browsing Unwanted Software detection
Primary domain itself submitted to threat-intel as ClearFake / iclickfix
Anti-bot / obfuscation-style OCR text ('I'm not a robot Ray 1D: basefadbs2ceceso') on an application page
Domain age information unavailable

Details

Page Title

Montech Institute – Student Application 2026

Scan Type

public

Domain Name Analysis

The domain name 'www.montech-institute.com' uses the commercial generic top-level domain (.com), featuring subdomain 'www'. The second-level label 'montech-institute' is 17 characters long with 6 vowels and ten consonants, notching 1 hyphen. It segments into 3 words: monte, ch, institute. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.montech-institute.com

Page Load Overview

11.91s
Total Load Time
967 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:10,963 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1364.90.55.216Hillsboro, Oregon, United States
AS26347New Dream Network, LLC
3104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.16.249.249Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
3188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.215.238Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.21.3.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
335.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7622--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C5151963DB451A1A81268EE3DBBA3737E9C5C90BAE28451DBF6F63F2BFBC4525111100

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:xZg8fid1Hz3N+oya22QubU4Agi0DuW0O0MvhySPaaitpUI6:xO7T3Nsa2TBN2aWLvAIalc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:919681:QipIDQlSKIAoSQi6bLIqIFFKLlYTAASEhAmIFpQlKCRR6DEpUgLAjCKAoEAZWZKcgEQYMWBBXSUUgBICpGAABdKQNJhFUUCi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f8f8809818800000
Perceptual Hash:d8da22cc99377638
Difference Hash:31b10d33330d8301
Wavelet Hash:fdfcf8f898d000c1
Color Hash:#862d34

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data