Security Scan Report: webelde.hu

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 6 domains to perform 71 HTTP transactions. The main domain is webelde.hu.

Submitted URL: https://webelde.hu

AI Security Verdict

Confirmed Scam

Confidence: 94%

9
Risk Score

Legitimate-looking Hungarian web-design site compromised with the IClickFix/EtherHiding ClickFix loader; critical IDS alerts and a malware IoC on the primary domain confirm active malware delivery.

Risk Factors (5)
Known ClickFix/EtherHiding malware kit (IClickFix) injected into the page
EtherHiding loader retrieving an encrypted stage from an Ethereum Sepolia smart contract
Obfuscated JavaScript hiding blockchain RPC and threat-feed hosts (1rpc.io, gateway.tenderly.co, sepolia.gateway.tenderly.co)
Critical network IDS alerts for malware C2/exfiltration and a ClickFix domain
Primary domain flagged as a malware loader by threat intelligence
Domain age information unavailable

Details

Page Title

Webelde – Weboldal, webshop, seo, tartalom, kampány

Scan Type

public

Domain Name Analysis

Domain 'webelde.hu' uses the Hungarian country-code top-level domain (.hu) with no subdomain. The registrable portion 'webelde' spans 7 characters split between 3 vowels and four consonants. Splitting it apart reveals 3 words: web, el, de. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://webelde.hu

Page Load Overview

3.62s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇭🇺Hungarian
Code: hu
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:hu
Text Length:5,246 chars
Detector Agreement:67%

Website Classification

Primary Category

corporate business97% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
97%
blog personal website
77%
real estate property
52%
documentation technical
28%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1145.88.93.5Hungary
AS42864Giganet Internet Szolgaltato Kft
10142.251.110.97Google · CDNUnited States
AS15169Google LLC
10216.239.32.36Google · CDNUnited States
AS15169Google LLC
10188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.26.13.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10216.239.34.36Google · CDNUnited States
AS15169Google LLC
10188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
717--

Detected Technologies9

WordPressv7.1.3
100%
JQueryv3.7.1
100%
100%
50%
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FBE3B830768A2C7A231F06CFE123775C62CADBA8DD62A4F1B1FB025492F5CD136D51A6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:/Rd3uJB2L7cJn6shvC+v25rXQ1ntMlykAGZd3Qt9CZE:/RdyvC+v2W

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:148392:xoEgNBNARtACEihAQJGxuGFHEDKrtKREJEJSJGFIIiD7KEMAQ4JAK6CBi1wEigiISUECTAIGAAgLYVimhQagRgRRgMiwI9HB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:feffffffff3e0000
Perceptual Hash:c6f84791e6569472
Difference Hash:d4a78dad8fe8e1c5
Wavelet Hash:faffe7f7c7000000
Color Hash:#4046bf

Scan History

Scan history not available

Unable to load historical scan data