Security Scan Report: bulimester.hu

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 3 countries across 4 domains to perform 65 HTTP transactions. The main domain is bulimester.hu.

Submitted URL: https://bulimester.hu

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate 18-year-old Hungarian event-planning site that has been compromised and injected with the ClearFake EtherHiding loader (hunting rule CRITICAL/HIGH, roster-confirmed, 2 feeds flag the domain). Do not interact; visitors risk a ClickFix malware chain.

Risk Factors (4)
Known malicious ClearFake blockchain-contract loader injected into the page HTML (hunting rule CRITICAL, roster-anchored)
ClearFake rival-kit cleanup / overlay-persistence script injected beside the loader (hunting rule HIGH, roster-anchored)
Multi-source threat-intel match flagging the primary domain as clearfake malware
IDS heuristics for JavaScript obfuscator usage (informational, but consistent with injected kit)
Domain age information unavailable

Details

Page Title

- Ceremóniamester, Rendezvény és esküvőszervező

Scan Type

public

Domain Name Analysis

Within the Hungarian country-code top-level domain (.hu), 'bulimester.hu' is registered and has no subdomain. The registrable portion 'bulimester' spans 10 characters with four vowels and six consonants. Tokenizing the label suggests 3 words: bu, lime, ster. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

= Logo. RÓLAM —SZOLGALTATASOK GALÉRIA It seems we cant find what youre looking for. Elérhetőség Kövess engem! J 136309403805 QQ) infogbulimester.hu A weboldalon a álói élmény érdekében sütiket h...

Page Load Overview

28.81s
Total Load Time
2.3 MB
Total Size

Language Analysis

Primary Language

🇭🇺Hungarian
Code: hu
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:hu
Text Length:1,388 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service71% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
71%
technology software
62%
corporate business
38%
blog personal website
37%
documentation technical
29%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17195.228.152.174Budapest, Budapest, Hungary
AS5483Magyar Telekom Plc.
16142.251.110.95Google · CDNUnited States
AS15169Google LLC
16157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
16142.251.20.94Google · CDNUnited States
AS15169Google LLC
654--

Detected Technologies7

WordPressv7.1.3
100%
JQueryv3.7.1
100%
50%
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D5E2E871A2984875BF7E57EC8C76B318E8B46600DE47D75AB0BB70508C64AF602A372D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:1jgOb43VvTX4WOZTMfBCdqwAlTm7xbpVvWDZdypa9t:d/y0WOlAA7xLYypa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:32798:FgZgOIEiiF4NEQzEeBBAB6kKZJmAAUPEhIGAMpQhlAUFBBJ9QLFVJQhoc1FcECYIkIlCEKgAoAAMwDhIRZK5OABYiPEpAA9A

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff0000ffff00
Perceptual Hash:c3f0b8b843637ab8
Difference Hash:2800484430000069
Wavelet Hash:00ffff0000ffff00
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data