Security Scan Report: fcs.com.ua

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 4 countries across 7 domains to perform 76 HTTP transactions. The main domain is fcs.com.ua and was registered 11 years ago.

Submitted URL: https://fcs.com.ua

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Established Ukrainian finance site appears compromised: injected ClickFix overlay plus EtherHiding blockchain loader, critical IDS exfil alert and exploit-kit-flagged third-party hosts. Do not interact.

Risk Factors (5)
Injected ClickFix social-engineering overlay route (fake 'Human Verification' instructing Windows users to open Terminal) — analyst-vetted malicious kit
EtherHiding / blockchain-based loader retrieval hides the second stage from static blocklists
Critical IDS malware alert for EtherHiding exfiltration matched on this page's traffic
Page loads an exploit-kit-flagged domain (cloud-browse.codes) and a flagged IP, not just its own assets
Obfuscated inline script conceals known-attacker blockchain RPC hosts (1rpc.io, polygon.drpc.org, tenderly gateway)
Domain age information unavailable

Details

Page Title

Фінансова компанія Стратег

Scan Type

public

Domain Name Analysis

The domain name 'fcs.com.ua' uses the Ukrainian country-code top-level domain (.com.ua) while skipping any subdomain. The core label 'fcs' covers 3 characters containing zero vowels alongside 3 consonants. Breaking it apart gives one word: fcs. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fcs.com.ua

Page Load Overview

17.07s
Total Load Time
4.6 MB
Total Size

Language Analysis

Primary Language

🇺🇦Ukrainian
Code: uk
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:uk
Text Length:635 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business90% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
90%
finance banking
63%
documentation technical
27%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1391.239.232.205Ukraine
AS196645Hostpro Lab LLC
9142.251.20.95Google · CDNUnited States
AS15169Google LLC
995.217.59.106Helsinki, Uusimaa, Finland
AS24940Hetzner Online GmbH
9142.251.110.94Google · CDNUnited States
AS15169Google LLC
9104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
9172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.127.95Google · CDNUnited States
AS15169Google LLC
768--

Detected Technologies12

WordPressv4.7.13
100%
JQueryv1.12.4
100%
100%
PHPv7.4.33
40%
30%
All in One SEOv2.3.12.2.1
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16A4372D35FC802386292B9C8F195D5066376905BB715CE64FBFC924BAF80F8938A2771

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:UBvLZ3DmXvAWuXHeyoQ2Y2c2v2KIs2Llh2Z+qfN0PZ98gR5fOmmnc38EXhDYXxwY:UBvLZ3KXvAWuXHeyoQ2Y2c2v2KIs2Ll4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:59814:8dwCBFEBGAAAgwQYIIwPkGHknYwgGLBFQBCNEgaLcKBjcPoAYglwEyCEQwEJlwFEEwp0wA2AgugoBQggkhQABAYNAECIHGIL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff8383898199ffff
Perceptual Hash:bc3cc66b59921c3c
Difference Hash:3f37373b3333e0f0
Wavelet Hash:8f0183888189ffff
Color Hash:#4fbf40

Scan History

Scan history not available

Unable to load historical scan data