Security Scan Report: www.tolnaiallatorvos.hu

Site favicon
Submitted: Completed: publiccompleted
This website contacted 20 IPs in 5 countries across 16 domains to perform 72 HTTP transactions. The main domain is tolnaiallatorvos.hu.

Submitted URL: https://www.tolnaiallatorvos.hu

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate Hungarian veterinary site compromised with ClearFake/EtherHiding: critical exfiltration alerts, blockchain payload RPCs and a fake 'not a robot' lure. Avoid visiting; do not follow its verification steps.

Risk Factors (5)
ClearFake malware family reported on the primary domain
Critical EtherHiding exfiltration IDS alerts (10x)
Injected blockchain RPC / Binance testnet data-seed calls unexplained by site content
Deceptive fake reCAPTCHA 'verify you are not a robot' social-engineering lure
Compromised CMS ('Please publish modules in offcanvas position' Joomla/WordPress template artifact) served alongside injected scripts
Domain age information unavailable

Details

Page Title

Dr. Kovács Géza - Tolnai Állatorvos

Scan Type

public

Domain Name Analysis

Domain 'www.tolnaiallatorvos.hu' uses the Hungarian country-code top-level domain (.hu) with subdomain 'www'. The core label 'tolnaiallatorvos' covers 16 characters containing seven vowels alongside 9 consonants. Tokenizing the label suggests 7 words: to, lna, i, all, at, or, vos. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

PETVET DATA KAPCSOLAT HASZNOS INFORMÁCIÓK PRAXIS KÉPEK Üdvözlöm, Dr. Kovács G amelyet a ee és kedvenceil létre Szekszárdi Weboldalunkon rengeteg hasznos információt talál velünk kapcsolatban! Ráadá...

Page Load Overview

3.54s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇭🇺Hungarian
Code: hu
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:hu-hu
Text Length:7,190 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15185.80.49.249Hungary
AS62214Rackforest Zrt.
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
323.36.162.200Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
323.45.103.56Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
315.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3142.251.20.97Google · CDNUnited States
AS15169Google LLC
32.17.198.49Akamai · CDNBrussels, Brussels Capital, Belgium
AS20940Akamai International B.V.
33.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
33.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
315.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
7220--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19DA31B337591301E4B678AF03650E79F59E642899D8129C8F19E873C2BC1CA79CFE16B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:PJU4ULGod5HOss9Dj3AUWnO9Do3A1TmT3A+t1g9DZ3AEl+5wVn8Mdr8Md+8MdH8X:mhd5HDs9Dj3AUWnO9Do3A1TmT3A+t1gJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:99079:ZAZggCIhiMckZRqCxB0oAAbYKJImZlHFGwEOXIAoABBtbjwsIwBwA0CxAEANUmEOHAQaQehH3AgM4ghFQjDLwcoAZIkbUAIM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff040400ffcffdff
Perceptual Hash:bb33c4e4c54aa5c6
Difference Hash:9139295902193945
Wavelet Hash:ff000000fb8fccff
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data