Security Scan Report: unomas.hu

Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 3 countries across 13 domains to perform 92 HTTP transactions. The main domain is unomas.hu.

Submitted URL: https://unomas.hu

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

1-day-old unomas.hu hosts a ClickFix kit: a fake Cloudflare 'Human Verification' overlay tells Windows users to open Terminal and paste clipboard code, with CRITICAL EtherHiding/ClickFix IDS alerts and malware YARA hits. Avoid.

Risk Factors (5)
Injected fake Cloudflare 'Human Verification' / Ray ID overlay impersonating Cloudflare
ClickFix Win+X → Terminal clipboard-paste instruction, a known malware-delivery technique
Live blockchain RPC/EtherHiding traffic (polygon.gateway.tenderly.co, quiknode.pro) used for loader/exfiltration infrastructure
Domain registered 1 day ago, unranked, resolving to an address with an abuse-reputation report
Instruction text addresses the visitor with OS-level keystrokes rather than normal site content
Domain age information unavailable

Details

Page Title

UNOMAS

Scan Type

public

Domain Name Analysis

The domain name 'unomas.hu' uses the Hungarian country-code top-level domain (.hu) without a subdomain. The core label 'unomas' covers 6 characters split between three vowels and three consonants. Splitting it apart reveals two words: uno, mas. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://unomas.hu

Page Load Overview

17.01s
Total Load Time
6.8 MB
Total Size

Language Analysis

Primary Language

🇭🇺Hungarian
Code: hu
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:hu
Text Length:2,842 chars
Detector Agreement:33%

Website Classification

Primary Category

documentation technical72% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
72%
government public service
30%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1778.24.186.235Hungary
AS41075ATW Internet Kft.
5142.251.14.95Google · CDNUnited States
AS15169Google LLC
5132.145.155.63Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
5188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
534.128.171.243Google · CDNKansas City, Missouri, United States
AS396982Google LLC
5142.251.110.94Google · CDNUnited States
AS15169Google LLC
5178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
5142.251.20.95Google · CDNUnited States
AS15169Google LLC
5150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
5192.178.183.94Google · CDNUnited States
AS15169Google LLC
9216--

Detected Technologies7

WordPressv7.1.3
100%
JQueryv3.7.1
100%
50%
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T130346627372A0B2C269B02CE8109310F45E1EA53EC11A5FCF7F115E9FE6DE8561A6772

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Bjwjwjwj6eAf/Tjwj1En6BgdE+/bIq6s2zq/FGsPH31v/6/qMCoYjh:B/UEnOgljD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:236936:BqAIQcOSQMUKH0BAA0AACghLJRVGCoAeIBAIFQKuAksikCxoQM5wSjfAoA8aIhdQKrKLwJYRCjhgUcAHZYGCFDqBBIaAQBQA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000dfff1d1c0018
Perceptual Hash:98b4665a9ae3ccac
Difference Hash:33962abab3710531
Wavelet Hash:c103ffff1f3c0018
Color Hash:#86672d

Scan History

Scan history not available

Unable to load historical scan data