Security Scan Report: buildinganime.unaux.com

Redirected to:
https://buildinganime.unaux.com/?i=1
Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 6 domains to perform 31 HTTP transactions. The main domain is unaux.com and was registered 10 years ago.

Submitted URL: https://buildinganime.unaux.com

Effective URL:
https://buildinganime.unaux.com/?i=1
Redirected

The Cisco Umbrella rank of the primary domain is #664,966 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Compromised site serving a ClickFix 'Human Verification' overlay kit: CRITICAL YARA/roster and IDS hits plus EtherHiding via Polygon contracts. Do not interact; avoid pasting anything into Terminal.

Risk Factors (5)
Known malicious ClickFix kit injected into the site (analyst-vetted roster match)
EtherHiding: obfuscated script resolves its next stage from a blockchain smart contract
Threat-feed infrastructure hidden behind obfuscation (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co) and unranked script host browse-codes-enter.beer
CRITICAL IDS alerts for exploit-kit check-in and malware exfiltration
Fake captcha / 'Human Verification' overlay used to lure visitors into running a malicious command
Domain age information unavailable

Details

Page Title

BUILDING ANIMATORS – BUILD YOUR OWN FUTURE

Scan Type

public

Domain Name Analysis

The domain 'buildinganime.unaux.com' uses the commercial generic top-level domain (.com) and includes subdomain 'buildinganime'. Count 5 characters in 'unaux' with three vowels and two consonants. Segmentation suggests two words: un, aux. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://buildinganime.unaux.com

Page Load Overview

3.94s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:439 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media62% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
62%
education learning
28%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10185.27.134.33United Kingdom
AS34119Wildcard UK Limited
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
3172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.250.154.94Google · CDNUnited States
AS15169Google LLC
3178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
3142.251.127.95Google · CDNUnited States
AS15169Google LLC
3104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3192.178.183.94Google · CDNUnited States
AS15169Google LLC
318--

Detected Technologies5

WordPressv6.3.1
100%
JQueryv3.7.0
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12603FA7253A0023667C947F89068321AECE4E517E5416AB9F3FD61E8FF58DA70877318

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:W0BIZdapNt1bLwJ8iZiPWBH6NJAj3TOwQRrM:eapjiZqWBaY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:39197:ABgglBMCggQGYwggQQp/yCiIGAwLRMSjAYVdAAgLBWwaURlAAKIANFgQMLDlBkbG8CYgHoaEAUA0YTgnhARJDcJQVIN23ZAR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:63e3e3cbc363131f
Perceptual Hash:a9a387618b699756
Difference Hash:c3070713038a6668
Wavelet Hash:63e3e34bc343131e
Color Hash:#761f93

Other Hashes

Crop Resistant:c3070713038a6668

Scan History

Scan history not available

Unable to load historical scan data