ScanMalware.com

Security Scan Report: centro.ba

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/70585654-586e-4946-9fdb-57858906c880Domain and IP registration (RDAP)/api/v1/rdap/70585654-586e-4946-9fdb-57858906c880How often this domain was scanned/api/v1/domain/stats/centro.baScan history for this domain/api/v1/domain/history/centro.ba?limit=15
This website contacted 13 IPs in 2 countries across 14 domains to perform 163 HTTP transactions. The main domain is centro.ba.

Submitted URL: https://centro.ba/

AI Security Verdict

Confirmed Scam

Confidence: 96%

9
Risk Score

Compromised Centro.ba storefront serving an injected ClickFix/ClearFake kit: fake Cloudflare 'Human Verification' overlay and Win+X Terminal paste instructions. Do not interact; never paste the offered command.

Risk Factors (5)
Injected ClickFix 'Human Verification' overlay driving visitors to paste and execute commands in Windows Terminal (PowerShell chain)
ClearFake / EtherHiding loader reading a server list from a Polygon smart contract via blockchain RPC nodes
Fake Cloudflare-verification branding (Ray ID, 'Authorize your browser now') on a site that is not Cloudflare
Critical malware IDS alerts and analyst-vetted kit roster anchors on the captured page
Primary domain reported as clearfake malware host by threat-intel feeds
Domain age information unavailable

Details

Page Title

Centro – Više od kupovine

Scan Type

public

Domain Name Analysis

The domain name 'centro.ba' uses the Bosnian country-code top-level domain (.ba) with no subdomain. Its registrable label 'centro' stretches across 6 characters with two vowels and four consonants. It segments into 1 word: centro. Expect 6 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://centro.ba/

Page Load Overview

25.11s
Total Load Time
4.2 MB
Total Size

Language Analysis

Primary Language

🇭🇷HR
Code: hr
Confidence:37%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:bs-BA
Text Length:5,024 chars
Detector Agreement:50%
Language mismatch: Declared as bs-BA but detected as hr

Website Classification

Primary Category

real estate property93% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

real estate property
93%
government public service
75%
technology software
70%
entertainment media
66%
healthcare medical
60%

Detected Features

Search
Articles
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1978.46.66.69Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
12192.178.183.97Google · CDNUnited States
AS15169Google LLC
12157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
1235.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
12142.251.110.95Google · CDNUnited States
AS15169Google LLC
12142.251.14.94Google · CDNUnited States
AS15169Google LLC
12178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
12157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
12216.239.34.36Google · CDNUnited States
AS15169Google LLC
12104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16313--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DE2409B3C4794D36276B41C8F9B03F4DF8A2EC07D74614A0B6EEA298D7C5AD2611361E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:xAXWe5OkdZTdZWdZFdZwdZBdZcdZoXMY1VowUf:xqdZTdZWdZFdZwdZBdZcdZojG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:212414:4pjfQOqBAEA3EiiBUdwdUIC9BCkQAgABKRBFsAIkQBAFYCkg0CoIABQDZg0jAgCEgVg6IDEQAAUwHbHQCQmIaghQBqEMHwAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffbfa3e1a1bfe3e1
Perceptual Hash:e39d9c9a63659c12
Difference Hash:41734e4b4b744fcd
Wavelet Hash:ffbf808181bd81e1
Color Hash:#931f67

Other Hashes

Crop Resistant:41734e4b4b744fcd,2dedcefff9e4210f,34b2fc6f339c4523

Scan History

Scan history not available

Unable to load historical scan data