Security Scan Report: ufakick.group

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 5 domains to perform 48 HTTP transactions. The main domain is ufakick.group and was registered 1 year 8 months ago.

Submitted URL: https://ufakick.group/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised/malicious gambling page serving a vetted ClickFix 'Human Verification' lure that drives Windows users to paste terminal commands, with an EtherHiding blockchain-resolved payload and critical IDS malware alerts.

Risk Factors (9)
Analyst-vetted ClickFix Win+X/Terminal 'Human Verification' overlay kit injected into the page
EtherHiding: blockchain-contract-driven loader resolving its payload host from a Polygon smart contract
Critical IDS malware alerts (ET MALWARE EtherHiding Exfil M2)
Obfuscated scripts concealing threat-feed hosts (1rpc.io, polygon.gateway.tenderly.co)
Primary domain reported as malware and page URL reported as unknown malware by multiple feeds
Loaded third-party host cloud-browse.codes reported as an exploit kit (clearfake-1) by three feeds
Fake Cloudflare 'not a robot' interstitial used to socially engineer visitors into running terminal commands
Claims to be the official UFABET direct site / parent company on a domain that is not UFABET's
Six cross-domain redirects before landing
Domain age information unavailable

Details

Page Title

UFAKICK ทางเข้าหลักบริษัทแม่ เว็บตรงไม่ผ่านเอเย่นต์ อันดับ 1

Scan Type

public

Domain Name Analysis

The domain 'ufakick.group' uses the .group top-level domain without a subdomain. Its registrable label 'ufakick' stretches across 7 characters containing 3 vowels alongside four consonants. Tokenizing the label suggests 2 words: ufa, kick. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ufakick.group/

Page Load Overview

10.50s
Total Load Time
1.0 MB
Total Size

Language Analysis

Primary Language

🇹🇭Thai
Code: th
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:th
Text Length:15,781 chars
Detector Agreement:80%

Website Classification

Primary Category

gambling betting99% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
99%
entertainment media
95%
corporate business
83%
adult content
73%
news media journalism
49%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8104.21.62.222Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.21.13.252Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
5172.67.139.212Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5172.67.133.145Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
489--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T145E3A67372465854304B0B8F5126334C7199EEDAFB23F8E4A2F22165A2F5F617062FE6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:rqpUrimFyptaO+o163XniEOwWSmMiZeuTh0Pakz4ZX7InbkepjX9GFUmb:jrimAHXxdTZBZEbbiFUE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:148262:CJUYABOhDIDE1BiAOBFmMJ6IpsRoqLUKQCNFAZSleBlRBwDJGIEQFoTZK0iwAUABpEYAUQhoWRAqOUAyQjAIjRg5ACEiyGCU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfcfc3c3fffffff7
Perceptual Hash:b03193c7c6ccc6ce
Difference Hash:1818163600000008
Wavelet Hash:3c0c0000fcfcff00
Color Hash:#b7bf40

Other Hashes

Crop Resistant:1818163600000008

Scan History

Scan history not available

Unable to load historical scan data