ScanMalware.com

Security Scan Report: ugvglobal.com

Submitted: Sep 12, 2026, 7:47:38 PMCompleted: Sep 12, 2026, 7:47:57 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

ClearFake/EtherHiding malware page: primary domain and a loaded third-party resource are flagged as 'clearfake' malware across multiple feeds, with CRITICAL IDS alerts for EtherHiding exfiltration and blockchain contract activity. Do not visit.

Risk Factors (6)
Content-malware Indicator of Compromise on the primary domain ('clearfake' malware, multi-source corroborated)
Third-party malicious resource (fingerprint-veri.info, 'ek clearfake-1') loaded by the page
CRITICAL IDS alert for EtherHiding exfiltration and blockchain RPC / Ethereum contract activity
Obfuscated JavaScript: Function() constructor code generation plus encode/decode inline scripts
Domain unranked in Cisco Umbrella with minimal legitimacy signals (10/100)
Cloaking interstitial ('Checking your browser before accessing…') typical of exploit-kit delivery pages
Domain age information unavailable

Details

Page Title

Ugvglobal

Scan Type

public

Domain Name Analysis

The domain 'ugvglobal.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'ugvglobal' stretches across 9 characters with 3 vowels and 6 consonants. Word splitting yields 3 words: ug, v, global. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ugvglobal.com

Page Load Overview

0.32s
Total Load Time
79 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:44 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
392.113.23.28Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
192.113.16.204Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
1192.178.183.94Google · CDNUnited States
AS15169Google LLC
64--

Detected Technologies6

WordPressv7.0.4
100%
MetaGenerator
100%
PHP
50%
MySQL
50%
Hostinger CDN
40%
HTTP/3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FCB2D732E0B400567F5F87EDC1D1B328E998EA15DA0AA775B0F9316885A8EF700F761D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:kjWmFNr/ZdSZUaArkWHmbZ2T8CPJ+ME0vWCJB2iGOPP:CWSZdypGOEJ+b0vLB2i3H

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:24349:UQqKnSHCS+gAuSCMZAoojkBJKDGwGB91IqaBWBjRRSpQSI0xKlpAAgKlQAIhAAAWSJkSAAQRmLMVFJlKjJfQBGBjEloYCBjh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7c3ffffff
Perceptual Hash:b38ccc3333cccc33
Difference Hash:0000000c0c000000
Wavelet Hash:3c3c3c24c0fccccc
Color Hash:#a953ac

Other Hashes

Crop Resistant:0000000c0c000000

Scan History

Scan history not available

Unable to load historical scan data