Security Scan Report: monaura.net

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 3 countries across 3 domains to perform 6 HTTP transactions. The main domain is monaura.net and was registered 1 year 6 months ago.

Submitted URL: https://monaura.net

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Confirmed ClickFix malware page: fake Cloudflare 'Human Verification' overlay tells Windows users to paste Terminal commands, with CRITICAL EtherHiding exfiltration alert and the primary domain flagged as malware by two feeds.

Risk Factors (6)
Known ClickFix malware kit injected into the page (roster-anchored) — fake CAPTCHA overlay coaching users to run clipboard-pasted commands in Windows Terminal
Impersonation of Cloudflare's verification UI (name, 'Cloudflare-protected sites' wording, Ray ID) on a domain that is not Cloudflare's
CRITICAL IDS alert for EtherHiding malware exfiltration, plus blockchain RPC / Ethereum contract request activity
Primary domain flagged as malware ('clearfake') by two independent threat-intel feeds
Third-party resource hosts flagged as malicious (rpc-mainnet.matic.quiknode.pro, checkyoubrowse.codes, 178.16.52.101:443)
Domain unranked in Cisco Umbrella top 1M with a very low business-legitimacy score (15/100)
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'monaura.net' uses the network infrastructure generic top-level domain (.net) while skipping any subdomain. The core label 'monaura' covers 7 characters with 4 vowels and three consonants. Word splitting yields two words: mon, aura. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://monaura.net

Page Load Overview

2.72s
Total Load Time
145 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,122 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software49% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
49%
cryptocurrency blockchain
42%
documentation technical
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
243.228.126.253Singapore, Singapore
AS133322XIMBO Internet Limited
2150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
2178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
63--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DB856A9B4754872B63D046D58158301BABE4E95BE53528ADEFC3ACEBF81F483487C722

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:eRf6JHfI/MBtZ/Rf6JHfI/MBtZ/Rf6JHfI/MBtZ/Rf6JHfI/MBtZ/Rf6JHfI/MBS:C

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1861121:YBCHJBwBBhKjwrAw4yJcLIpAEAe5o1BcNUBygOAtDkAhmCYMGApiAwhBxFOBMho4Cwj4CgMUAMUgDUkwUugIRGdCKcZFuFpU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:01ffffffffffffff
Perceptual Hash:ab2b2b2b2b2b2b2a
Difference Hash:8300000000000000
Wavelet Hash:01ffffff00000000
Color Hash:#8c40bf

Other Hashes

Crop Resistant:8300000000000000

Scan History

Scan history not available

Unable to load historical scan data