ScanMalware.com

Security Scan Report: udrzba-sprava.cz

Site favicon
Submitted: Oct 8, 2026, 8:58:10 PMCompleted: Oct 8, 2026, 8:58:53 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Legitimate 8-year-old Czech property-maintenance WordPress site appears compromised: CRITICAL ClickFix/EtherHiding malware IDS alerts, blockchain RPC payload delivery, and a multi-source-flagged malicious resource (zvh4.com).

Risk Factors (5)
CRITICAL network IDS alerts for ClickFix/EtherHiding malware (exfiltration and C2-style domain contact)
Third-party resource zvh4.com corroborated as malware by 2 independent threat-intel feeds
Primary domain reported as a malware loader (single-source feeder)
Blockchain RPC connection matching the EtherHiding payload-delivery pattern
Fake ALTCHA/'security verification' overlay injected into a legitimate business site (compromise)
Domain age information unavailable

Details

Page Title

Údržba správa nemovitostí

Scan Type

public

Domain Name Analysis

Domain 'udrzba-sprava.cz' uses the Czech country-code top-level domain (.cz) without a subdomain. The second-level label 'udrzba-sprava' is 13 characters long containing 4 vowels alongside eight consonants; bonus characters include 1 hyphen. Splitting it apart reveals 6 words: u, dr, zb, a, sp, rava. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://udrzba-sprava.cz

Page Load Overview

6.28s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇨🇿Czech
Code: cs
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:cs
Text Length:306 chars
Detector Agreement:50%

Website Classification

Primary Category

real estate property84% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

real estate property
84%
documentation technical
65%
technology software
64%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8185.8.237.11Czech Republic
AS208414WEDOS Internet, a.s.
4104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.14.95Google · CDNUnited States
AS15169Google LLC
4104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.20.94Google · CDNUnited States
AS15169Google LLC
286--

Detected Technologies8

WordPressv6.9.1
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
HTTP/3
40%
WP Featherlight
20%
Twenty Seventeen
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F4E26D32EE98202A2E43D30A3241A799B175A0DBE54BC3AD759CC904CFC55F4C7BB96C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:5x7pJ/4MxEbrfKC5cCHTfbC9qOOuNGG8uGnFl:5RT4MxSfKC5cXwOOi8/X

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:32509:SQChQAOKWDFULjKmEVNasIVgSIBSgRgaAUYJAwzIhgEABQgEVgCyREAoKAQCXqBQAACEQTJNIBIwRpECJvFiiFxmzAKylGIL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7efc7e7e7e7
Perceptual Hash:f33326339899cc33
Difference Hash:0c0c0c1c1c0c0c0c
Wavelet Hash:c2c6e6c6c6c6c6c6
Color Hash:#2dd2a3

Other Hashes

Crop Resistant:0c0c0c1c1c0c0c0c

Scan History

Scan history not available

Unable to load historical scan data