Security Scan Report: wkaikido.pl

Submitted: Completed: publiccompleted
This website contacted 9 IPs in 3 countries across 7 domains to perform 41 HTTP transactions. The main domain is wkaikido.pl and was registered 2 years 9 months ago.

Submitted URL: https://wkaikido.pl

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised aikido club site injected with a ClearFake/EtherHiding ClickFix chain: fake Cloudflare check copies a hidden-window PowerShell command to the clipboard. Do not paste or run anything.

Risk Factors (6)
ClearFake/ClickFix malware chain served from the page (kit-roster ground truth)
Clipboard shell-command injection (pastejacking) instructing victims to open Run and paste PowerShell
EtherHiding: next-stage server address read from a Polygon smart contract via public RPC nodes
Obfuscated script with hidden threat-feed hosts and anti-analysis (DevTools/right-click blocked)
Critical IDS malware alerts and multi-feed IoC matches on primary domain and loaded resources
Impersonation of a Cloudflare human-verification challenge on a non-Cloudflare page
Domain age information unavailable

Details

Page Title

Wrocławski Klub Aikido – Witryna klubu aikido we Wrocławiu

Scan Type

public

Domain Name Analysis

You're looking at domain 'wkaikido.pl' on the Polish country-code top-level domain (.pl) without a subdomain. The second-level label 'wkaikido' is 8 characters long containing four vowels alongside 4 consonants. Splitting it apart reveals three words: w, k, aikido. The median word length lands at one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://wkaikido.pl

Page Load Overview

1.90s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇵🇱Polish
Code: pl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pl-PL
Text Length:14,375 chars
Detector Agreement:25%

Website Classification

Primary Category

news/blog40% confidence
Type: dynamic
Method: structural

All Detected Categories

news/blog
40%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
991.237.52.26Poland
AS41079Cyber_Folks S.A.
4172.217.208.95Google · CDNUnited States
AS15169Google LLC
4104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.110.94Google · CDNUnited States
AS15169Google LLC
4172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
4142.251.127.139Google · CDNUnited States
AS15169Google LLC
4142.251.14.132Google · CDNUnited States
AS15169Google LLC
4142.251.127.102Google · CDNUnited States
AS15169Google LLC
419--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T127947DB3DFA01C744F372B5DA9EE66DDB62D63879641458DB23DC1A08BE2DC110E1A8C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:YS3x/ZTVb9bBjp3N/V/5HBDFrNrpzRvd3lXhffOz5M2EFC/hVFP:z3x/ZTVb9bBjp3N/V/5HBDFrNrpzRvdW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:424538:CRAHySZk8QgwDMAKom/hxgFagoEDieFdoGKOkhEEaagLBBoAQPBI0tYjD8gAAxAMQmAIgYYQAhIEjoJNgKIYIEiAFETbAIkB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfcfc3c3fffffff7
Perceptual Hash:b03993c7c646c6c7
Difference Hash:1818163600000008
Wavelet Hash:f0c0c0c0fcfcff00
Color Hash:#d279c1

Other Hashes

Crop Resistant:1818163600000008

Scan History

Scan history not available

Unable to load historical scan data