Security Scan Report: www.ufa365.academy

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 6 domains to perform 71 HTTP transactions. The main domain is ufa365.academy and was registered 2 years 2 months ago.

Submitted URL: https://www.ufa365.academy/

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Gambling site compromised with an analyst-vetted ClickFix 'Human Verification' EtherHiding loader: critical IDS EtherHiding alerts, obfuscated blockchain RPC hosts, Safe Browsing flag and multi-feed malware reports. Do not visit.

Risk Factors (6)
Known malicious ClickFix/EtherHiding kit injected into the page (analyst-vetted kit roster, YARA match)
Critical IDS alerts: ET MALWARE EtherHiding Exfil M2 (x2)
Obfuscated script concealing threat-feed blockchain RPC hosts
Exploit-kit domain (ek clearfake-1) loaded as a third-party resource, corroborated by 3 feeds
Google Safe Browsing: Unwanted Software; domain/URL reported as malware
Illegal online gambling content targeting Thai users
Domain age information unavailable

Details

Page Title

UFA365 เว็บตรงค่ายหลัก อันดับ1 ในไทย ระบบครบ อัปเดตล่าสุด 2026

Scan Type

public

Domain Name Analysis

The domain 'www.ufa365.academy' uses the .academy top-level domain with subdomain 'www'. The second-level label 'ufa365' is 6 characters long containing two vowels alongside one consonant, notching three digits. Tokenizing the label suggests two words: ufa, 365. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.ufa365.academy/

Page Load Overview

4.71s
Total Load Time
881 KB
Total Size

Language Analysis

Primary Language

🇹🇭Thai
Code: th
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:th
Text Length:15,106 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting99% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
99%
finance banking
95%
entertainment media
90%
technology software
63%
government public service
48%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15172.67.149.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.21.29.163Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.110.95Google · CDNUnited States
AS15169Google LLC
7104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.14.94Google · CDNUnited States
AS15169Google LLC
7172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
7142.251.20.95Google · CDNUnited States
AS15169Google LLC
7142.251.13.94Google · CDNUnited States
AS15169Google LLC
719--

Detected Technologies4

WordPressv7.1.3
100%
JQueryv3.7.1
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18E2462F37246D55430CA468F9126330C309CDE96AE22F4E8E2F51125A2FDB5278D6EDB

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:hwE/B9NPMtvayYgNryngRo+a2jiCzZntqwtVj5Z15ZU7xp:HBLM1YgNryngRo+a2jiCzZntqwtVu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:219525:CEiQwAi8KoSGABAAhEUgQLBEpyQRAgMQFQoCsKsAGQElMmLYjDPQAQwEDIpjqNIC2gyZhAAEgBGQNAlFUAEKDw8oEQi5AIEg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7c3c3fffffff7
Perceptual Hash:b030a3c7cecccccd
Difference Hash:0c1c161600000008
Wavelet Hash:f4c4c0c0fcfcff00
Color Hash:#4e1f93

Other Hashes

Crop Resistant:0c1c161600000008

Scan History

Scan history not available

Unable to load historical scan data