Security Scan Report: onixone.com.co

Redirected to:
https://onixone.com.co/UPDATE/download.html
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 4 domains to perform 9 HTTP transactions. The main domain is onixone.com.co and was registered 3 years 6 months ago.

Submitted URL: https://onixone.com.co/UPDATE/

Effective URL:
https://onixone.com.co/UPDATE/download.html
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Confirmed malicious kit: fake Adobe 'secured document' download page that lures Windows visitors into installing a remote-management agent; analysts and threat intel both flag it. Avoid.

Risk Factors (5)
Adobe brand impersonation on a non-Adobe domain
Known malicious phishing kit (Adobe secure-document RMM lure) identified by analyst-vetted roster and hunting rule
Fake document-download flow that prompts the user to obtain a 'secured' PDF / remote-management payload
Visitor fingerprinting (external IP lookup) consistent with the kit's Edge/Mac/mobile filtering gate
Domain reputation: no Cisco Umbrella ranking despite older registration
Domain age information unavailable

Details

Page Title

Background Image Page

Scan Type

public

Domain Name Analysis

Within the Colombian country-code top-level domain (.com.co), 'onixone.com.co' is registered with no subdomain. The registrable portion 'onixone' spans 7 characters split between four vowels and three consonants. It segments into three words: on, ix, one. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Adobe Creativity < Design v PDF & E-signatures v Marketing & Commerce ‘Leam & Support v Q Search Adobe | @ 8 Home 4Q, Shared with you Ey & Projects {B Libraries & brands 8 @ Review links | ome 5 V...

Page Load Overview

1.43s
Total Load Time
151 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:315 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software44% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
44%
documentation technical
35%
healthcare medical
34%
government public service
33%
news media journalism
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5190.8.176.201Dallas, Texas, United States
AS36454WHG Hosting Services Ltd
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
1142.251.13.94Google · CDNUnited States
AS15169Google LLC
1104.26.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
95--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EF61414BA9F3045B390790716BF36B062665D003D20ACA593FBD62A8CF85A9594B73CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:nBr+5LMAFtyizQfYn9lPh7TsFWtptWyN8y7euXDF3:nBr0z9zQfk9lFoFWtptWyneuXDF3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3294:AAgAAiBMJEMUAGAAgQAAQABAIIAABABGIBEgAAEAAoFAiBABAmAEABAgAAKAADAEgAkAAQgUAACAQABAiAiEJgBgAAIJAIIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00001c3c3c3c0000
Perceptual Hash:9c1c6763cd9c9c98
Difference Hash:c4b03232b2aab084
Wavelet Hash:000e3e3e3e3e267e
Color Hash:07200000007

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data