Security Scan Report: mtclogistic.net

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 7 domains to perform 29 HTTP transactions. The main domain is mtclogistic.net and was registered 5 years ago.

Submitted URL: https://mtclogistic.net

AI Security Verdict

Confirmed Scam

Confidence: 94%

9
Risk Score

Compromised/defaced logistics site running a ClearFake EtherHiding malware loader, contacting a CRITICAL exploit-kit TDS host and serving hidden gambling spam links. Do not visit or interact.

Risk Factors (6)
Known malicious ClearFake Polygon/EtherHiding loader injected into the page (CRITICAL hunting-rule match + kit-roster confirmation)
CRITICAL IDS alerts: exploit-kit TDS domain socketapiupdates.com contacted via DNS and TLS SNI
Unranked third-party script host socketapiupdates.com feeding the page
Site defaced ('hacked by trenggalek6etar'), indicating an unpatched or compromised CMS
Hidden link block injecting off-topic gambling/betting spam links pointing to externally flagged malicious domains
Threat-intel reports naming the primary domain as a clearfake malware host
Domain age information unavailable

Details

Page Title

hacked by trenggalek6etar – Cargo And Freight

Scan Type

public

Domain Name Analysis

Within the network infrastructure generic top-level domain (.net), 'mtclogistic.net' is registered. The registrable portion 'mtclogistic' spans 11 characters split between three vowels and eight consonants. Splitting it apart reveals 2 words: mtc, logistic. Median word length comes out to 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mtclogistic.net

Page Load Overview

75.10s
Total Load Time
432 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:40%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:11,326 chars
Detector Agreement:67%
Language mismatch: Declared as fr-FR but detected as en

Website Classification

Primary Category

adult content64% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

adult content
64%
news/blog
20%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8146.88.234.59Paris, Île-de-France, France
AS53589PlanetHoster
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
315.237.213.137Aws · CLOUDParis, Île-de-France, France
AS16509Amazon.com, Inc.
3142.251.20.94Google · CDNUnited States
AS15169Google LLC
3103.224.182.212San Diego, California, United States
AS133618Trellian Pty. Limited
3185.53.179.200Germany
AS206834Team Internet AG
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
3142.251.13.94Google · CDNUnited States
AS15169Google LLC
298--

Detected Technologies8

100%
JQueryv3.7.1
100%
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18D3309F151980CBF622B668C7C717EDEEDBB56B18B459669B1FFB0108BE04F6016221C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:OW8Zdyp6cAqMcLn2SjwkCQW6Z1FKBHXjgOb43VvTg4WOZTMfBCdqbBxgj1Z+2u5x:OnyplAqMcxm/yZWOWBxgJZ+2u5gc5T

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:54283:is0FAkmAlIOEWhDENEQQAAu0gBpjQSAyJGmpCGBhKACBWSmAQQJgwgqjQqfAACyfcFOICCAsKBSZaQSTBCsHhKEgiCGIZEAQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffc7d3c3c3f7ff
Perceptual Hash:bc36163e1e5e1616
Difference Hash:34060626160e2714
Wavelet Hash:00c3c3c3c3c3c3ff
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data