Security Scan Report: www.view360.lk

Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 3 countries across 10 domains to perform 106 HTTP transactions. The main domain is view360.lk.

Submitted URL: https://www.view360.lk

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate-looking Kandy hotel whose site has been compromised and now injects a ClickFix/EtherHiding malware loader (fake 'Human Verification' overlay, blockchain next-stage). Do not interact.

Risk Factors (4)
Compromised legitimate hotel site serving a ClickFix 'Human Verification' overlay that coaxes Windows visitors into opening Terminal and running commands
Blockchain-based (EtherHiding) loader resolving the next-stage payload host from a Polygon smart contract to evade takedown
Critical malware/exploit-kit IDS alerts and a roster-anchored YARA match on the page HTML
Obfuscated script concealing threat-feed RPC hosts and an unranked payload host (browse-codes-enter.beer)
Domain age information unavailable

Details

Page Title

View 360 | Experience Luxury Stay

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.view360.lk' on the Sri Lankan country-code top-level domain (.lk); it also runs on subdomain 'www'. Count 7 characters in 'view360' containing two vowels alongside 2 consonants, along with three digits. It segments into two words: view, 360. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.view360.lk

Page Load Overview

14.99s
Total Load Time
16.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:45%
Script:Latin
Direction:ltr

Detection Details

Text Length:10,022 chars
Detector Agreement:75%

Website Classification

Primary Category

download file sharing37% confidence
Type: spa
Method: ml+structural

All Detected Categories

download file sharing
37%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1613.228.54.173Aws · CLOUDSingapore, Singapore
AS16509Amazon.com, Inc.
674.125.29.95Google · CDNUnited States
AS15169Google LLC
6142.251.154.119Google · CDNUnited States
AS15169Google LLC
6142.251.14.97Google · CDNUnited States
AS15169Google LLC
6142.251.14.94Google · CDNUnited States
AS15169Google LLC
6216.239.34.36Google · CDNUnited States
AS15169Google LLC
6142.251.13.94Google · CDNUnited States
AS15169Google LLC
6172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
6142.251.14.95Google · CDNUnited States
AS15169Google LLC
10616--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T110D3B57355E1412A028686D0A536BB1BFEE3E503CE070698F3FC17D96FC9E924C67698

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:kkJ/2aK/qU4B3Ql2yOUF5euMfvk9RHHXax+b:nKiE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:136314:rCQ4waSYBACwoKODKig4BYwnIl5wMuiKQZMQghESWZKAfAEowA0QhBIIAjDYgEmcyEUQkUpHIVhJcKJDMQEAZEFGFw1Qdgh4

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffff7f00007e01
Perceptual Hash:80df3b542e912bd5
Difference Hash:100040a42480908b
Wavelet Hash:00ffff7f10407e01
Color Hash:#1f7293

Other Hashes

Crop Resistant:100040a42480908b

Scan History

Scan history not available

Unable to load historical scan data