Security Scan Report: mazzart.ro

Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 10 domains to perform 99 HTTP transactions. The main domain is mazzart.ro and was registered 7 years ago.

Submitted URL: https://mazzart.ro

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Legitimate-looking Bucharest nail salon whose WordPress site is compromised: an injected ClickFix kit shows a fake Cloudflare 'Human Verification' overlay and tricks Windows users into pasting Terminal commands, with the payload host fetched from a Polygon smart contract (EtherHiding). Never follow the prompt.

Risk Factors (5)
Analyst-vetted ClickFix Win+X → Terminal clickjacking kit injected into the page (2 critical roster sightings)
EtherHiding blockchain-contract-based payload loader with obfuscated JavaScript
CRITICAL IDS malware alerts for EtherHiding exfiltration
Third-party script host browse-cloud.codes flagged for IClickFix and not ranked
Fake Cloudflare security-verification branding used to social-engineer visitors into pasting commands
Domain age information unavailable

Details

Page Title

MAZZART – Salon Manichiură & Pedichiură în București

Scan Type

public

Domain Name Analysis

You're looking at domain 'mazzart.ro' on the Romanian country-code top-level domain (.ro) and has no subdomain. Its registrable label 'mazzart' stretches across 7 characters containing two vowels alongside five consonants. Word splitting yields three words: maz, z, art. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

SSMAZZART Servicii & prețuri Recenzii Instagram Programează-te online > SALON DE MANICHIURA & PEDICHIURA - BUCURESTI Frumusețea stă A oo in detalii. Manichiură, pedichiură și întreținere cu gel, l...

Page Load Overview

2.26s
Total Load Time
22.6 MB
Total Size

Language Analysis

Primary Language

🇷🇴Romanian
Code: ro
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:ro-RO
Text Length:5,839 chars
Detector Agreement:50%

All Detected Languages

🇷🇴ro(89%)🇺🇸en(8%)🇪🇸ca(2%)🇩🇪de(1%)

Website Classification

Primary Category

social media network94% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
94%
healthcare medical
81%
adult content
51%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6578.47.166.57Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
9142.251.20.95Google · CDNUnited States
AS15169Google LLC
9104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.13.94Google · CDNUnited States
AS15169Google LLC
964.130.32.46Frankfurt am Main, Hesse, Germany
AS20326TeraSwitch Networks Inc.
3192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
2157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
2188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
9910--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18744F7B1B3013039945B878EA171732C60E9D5BDD9A2029CFEF9525581FACF13663F8A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:1ukPwqitkKZpbA7MNCwdDQfIB3ntKp6qpLk123I:N7M323I

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:265306:AqAQdBITHSACP4J3hyAIoTgDAYwAWwyAwEJgEKoiSYs4IgQ16ZyMOAXEJBAgSCBCnR3BlRyAEEHBgaigbLtMAQ4A7Q8AEEYz

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00f3f1f191f1ffff
Perceptual Hash:ec6d93126a136d6c
Difference Hash:6b27232323433c33
Wavelet Hash:00f191d191f1d3df
Color Hash:06c01000000

Scan History

Scan history not available

Unable to load historical scan data