Security Scan Report: raptors.pt

Redirected to:
https://www.raptors.pt/
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 9 domains to perform 56 HTTP transactions. The main domain is raptors.pt.

Submitted URL: https://raptors.pt

Effective URL:
https://www.raptors.pt/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Legitimate-looking Portuguese sports-club page compromised with an injected ClickFix 'Human Verification' overlay and EtherHiding blockchain loader; CRITICAL IDS alerts and multi-source malicious resource confirm malware delivery. Do not interact.

Risk Factors (4)
Compromised page injecting a ClickFix fake 'Human Verification' overlay that instructs Windows users to open Terminal and run a blockchain-hosted loader
Obfuscated JavaScript that resolves a packed contract loader via Polygon smart contracts (EtherHiding)
Multiple CRITICAL IDS alerts for EtherHiding data exfiltration
Third-party resource cloud-browse.codes corroborated as malicious by three independent threat-intel feeds
Domain age information unavailable

Details

Page Title

Esposende Raptors

Scan Type

public

Domain Name Analysis

The domain 'raptors.pt' uses the Portuguese country-code top-level domain (.pt). The core label 'raptors' covers 7 characters split between 2 vowels and 5 consonants. Tokenizing the label suggests one word: raptors. The median word length lands at 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://raptors.pt

Page Load Overview

5.79s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-PT
Text Length:1,241 chars
Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
774.125.29.95Google · CDNUnited States
AS15169Google LLC
7142.251.110.94Google · CDNUnited States
AS15169Google LLC
735.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
7104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
7172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
568--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19F93D7635384433FA3D449E59254721B52E1E50BE434215DFBAF6AEFFB2C9822839732

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:0WDZdypa9+M4ntodvlROMW8rQZCoI2mI2gWJ+b0vLBoEQ5eXyrT+yw/1Wu+OaRI7:0YypfMm4lROMW8rQZCoI2mI2gWRoTAB

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:89094:ixhL7EBJmQGpAFiJNICCAg3AkBRryVCgJhoRoZAjAGS0MAHBohIQeroCAgcGqaYIBtAgAROABzQbCngBAjMRVhGwUGkQhQWB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0f87fffb000000
Perceptual Hash:8ab791e8c5c8e6e4
Difference Hash:307d2d7147153161
Wavelet Hash:ff8f87fffb000000
Color Hash:#1f5393

Scan History

Scan history not available

Unable to load historical scan data