Security Report: office120.com.ua - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1d182259-c5af-4dc4-ae7c-1e2b22264d8a Domain and IP registration (RDAP)/api/v1/rdap/1d182259-c5af-4dc4-ae7c-1e2b22264d8aHow often this domain was scanned/api/v1/domain/stats/office120.com.ua Scan history for this domain/api/v1/domain/history/office120.com.ua?limit=15

This website contacted 11 IPs in 2 countries across 8 domains to perform 87 HTTP transactions. The main domain is office120.com.ua and was registered 5 years ago.

Submitted URL: https://office120.com.ua

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Legitimate-looking Ukrainian office-rental site that appears compromised: CRITICAL IDS alerts for ClickFix/EtherHiding malware and blockchain C2 traffic, plus a malware-loader flag on the primary domain.

Risk Factors (5)

CRITICAL IDS alert: EtherHiding Exfil M2 (malware exfiltration via blockchain contracts)

CRITICAL IDS alert: ClickFix malware domain contacted in TLS SNI

Primary domain flagged as malware loader (single-source, unverified)

Third-party resource interseq.at flagged malicious by 3 independent feeds

Page contacts blockchain RPC domains (tenderly, nodies, 1rpc.io) typically abused for hidden C2/payload retrieval

Domain age information unavailable

Details

Page Title

Офис 120 – Место силы вашего бизнеса

Scan Type

public

Favicon Hash

MMH3: 1140389847

MD5: 14de9df2434a285d7b411c590077af59

Domain Name Analysis

The domain 'office120.com.ua' uses the Ukrainian country-code top-level domain (.com.ua) and has no subdomain. The core label 'office120' covers 9 characters containing three vowels alongside 3 consonants; it also includes three digits. Word splitting yields 2 words: office, 120. Median word length is 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.63s

Total Load Time

9.4 MB

Total Size

Language Analysis

Primary Language

🇺🇦Ukrainian

Code: uk

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:uk

Text Length:1,578 chars

Detector Agreement:60%

Website Classification

Primary Category

government public service72% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

72%

real estate property

70%

corporate business

67%

blog personal website

65%

finance banking

65%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	185.68.16.108	Ukraine	AS200000Hosting Ukraine LTD
7	142.251.110.95Google · CDN	United States	AS15169Google LLC
7	192.178.183.94Google · CDN	United States	AS15169Google LLC
7	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	104.21.3.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	142.251.127.95Google · CDN	United States	AS15169Google LLC
7	142.251.14.94Google · CDN	United States	AS15169Google LLC
7	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
87	11	-	-