Security Scan: Wattygo

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fb09a3f0-a421-4699-ba77-c5b0fc929d0a Domain and IP registration (RDAP)/api/v1/rdap/fb09a3f0-a421-4699-ba77-c5b0fc929d0aHow often this domain was scanned/api/v1/domain/stats/wattygo.com Scan history for this domain/api/v1/domain/history/wattygo.com?limit=15

This website contacted 16 IPs in 3 countries across 15 domains to perform 61 HTTP transactions. The main domain is wattygo.com and was registered 1 year 7 months ago.

Submitted URL: https://wattygo.com/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised/weaponised site hosting ClickFix: fake Cloudflare 'Human Verification' telling Windows users to paste commands into Terminal, plus an ErrTraffic/Exvicy injected loader. Do not interact.

Risk Factors (5)

Injected ClickFix social-engineering overlay instructing users to paste attacker-supplied commands into Windows Terminal/PowerShell

ErrTraffic/Exvicy obfuscated WordPress injection loader (Base64/XOR + new Function) present in page body

CRITICAL YARA malware matches on page HTML (2 rules, roster-anchored)

CRITICAL IDS alerts: EtherHiding exfiltration, ClickFix domain contact, Spamhaus DROP-listed traffic

Impersonation of Cloudflare's browser-verification UI with fabricated Ray ID on wattygo.com

Domain age information unavailable

Details

Page Title

Wattygo

Scan Type

public

Favicon Hash

MMH3: -2020662967

MD5: 41e97b974dca8081bd432a5c9b71f059

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'wattygo.com' is registered with no subdomain. The registrable portion 'wattygo' spans 7 characters containing 2 vowels alongside 5 consonants. Word splitting yields three words: watt, y, go. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

22.31s

Total Load Time

3.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:745 chars

Detector Agreement:50%

Website Classification

Primary Category

cryptocurrency blockchain46% confidence

Type: spa

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

46%

technology software

46%

documentation technical

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
16	188.165.0.143	France	AS16276OVH SAS
3	136.243.16.49	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
3	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
3	158.94.208.87	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
3	88.99.95.221	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
3	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
61	16	-	-