Security Report: unayofficial.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/04b5f6bd-719d-4c09-8891-3c8a96e57e82 Domain and IP registration (RDAP)/api/v1/rdap/04b5f6bd-719d-4c09-8891-3c8a96e57e82How often this domain was scanned/api/v1/domain/stats/unayofficial.com Scan history for this domain/api/v1/domain/history/unayofficial.com?limit=15

This website contacted 9 IPs in 2 countries across 7 domains to perform 158 HTTP transactions. The main domain is unayofficial.com and was registered 2 months ago.

Submitted URL: https://unayofficial.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised WooCommerce store injected with a ClickFix fake 'Cloudflare Human Verification' overlay (Win+X Terminal paste) plus EtherHiding exfil traffic; vetted kit roster and CRITICAL YARA/IDS hits confirm malicious payload delivery.

Risk Factors (6)

Injected fake Cloudflare 'Human Verification' / ClickFix Win+X overlay delivering a paste-and-run PowerShell payload

Analyst-vetted malicious kit identified in the kit roster (clickfix-winx-overlay-2026-10)

CRITICAL YARA match for ClickFix_WinX_Overlay_Kit

CRITICAL IDS alert ET MALWARE EtherHiding Exfil M2 and blockchain RPC / Ethereum getDomain() traffic

Threat-intel IoC on the primary domain (malware loader) and on a third-party script host loaded by the page

New, unranked 60-day-old domain

Domain age information unavailable

Details

Page Title

Unay Official – Made for Little Moments. Designed to Last

Scan Type

public

Favicon Hash

MMH3: -722802846

MD5: ffff557a4f222d0bda2ac706840a4a64

Domain Name Analysis

You're looking at domain 'unayofficial.com' on the commercial generic top-level domain (.com) and has no subdomain. Count 12 characters in 'unayofficial' split between six vowels and six consonants. Word splitting yields three words: u, nay, official. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

17.26s

Total Load Time

6.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:3,966 chars

Detector Agreement:100%

Website Classification

Primary Category

blog personal website70% confidence

Type: spa

Method: ml+structural

All Detected Categories

blog personal website

70%

e-commerce shopping

69%

download file sharing

68%

news media journalism

65%

government public service

65%

Detected Features

Products

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
22	217.160.0.30	Germany	AS8560IONOS SE
17	142.251.14.95Google · CDN	United States	AS15169Google LLC
17	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
17	192.0.76.3	San Francisco, California, United States	AS2635Automattic, Inc
17	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
17	192.178.183.94Google · CDN	United States	AS15169Google LLC
17	142.251.20.95Google · CDN	United States	AS15169Google LLC
17	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
17	142.251.20.94Google · CDN	United States	AS15169Google LLC
158	9	-	-