Security Scan Report: unaacademiaonline.com

Submitted: Completed: publiccompleted
This website contacted 24 IPs in 3 countries across 18 domains to perform 109 HTTP transactions. The main domain is unaacademiaonline.com and was registered 6 years ago.

Submitted URL: https://unaacademiaonline.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Compromised legitimate site now serving a ClickFix fake 'Human Verification' overlay with an EtherHiding blockchain loader; multiple CRITICAL IDS alerts and an analyst-vetted kit confirm malware distribution. Do not interact.

Risk Factors (4)
Compromised page injecting a ClickFix fake 'Human Verification' overlay that directs Windows users to open Terminal and run commands
Packed/obfuscated JavaScript with blockchain-based (EtherHiding) second-stage retrieval from Polygon/Tenderly smart contracts
Multiple CRITICAL network IDS malware/exploit-kit alerts tied to ClickFix and EtherHiding exfiltration
Threat-feed hostnames concealed inside decoded script (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co)
Domain age information unavailable

Details

Page Title

Creamos Tu Academia Online – Sitios de membresía, academias online. Creamos tu centro de formación online.other network

Scan Type

public

Domain Name Analysis

The domain 'unaacademiaonline.com' uses the commercial generic top-level domain (.com) with no subdomain. The core label 'unaacademiaonline' covers 17 characters containing 10 vowels alongside seven consonants. Tokenizing the label suggests 3 words: una, academia, online. Median word length comes out to six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://unaacademiaonline.com

Page Load Overview

9.82s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:4,866 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical71% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
71%
blog personal website
56%
healthcare medical
31%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17167.250.5.32Argentina
AS264649NUT HOST SRL
4142.251.14.95Google · CDNUnited States
AS15169Google LLC
4142.251.110.97Google · CDNUnited States
AS15169Google LLC
4192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
4172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
435.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
4178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
4216.239.32.36Google · CDNUnited States
AS15169Google LLC
10924--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T187A3B562BF960D66210F06CF5007720D90E6DFE6ED12AAE4F5F24227B2F4CE136A2575

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:QCt5UFyp46+xDOp6ZcIL5bMVSSNQuwJyDAYsBGbaIGGDjjPSRm:MAGxDOcZcILBMVSeQumyDpsBGOGCY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:100811:ScoGwaBCkAuISGBBUIIRoHQtkAAiEIcosQCICFAMZJgAIPiIrIqyAs5MQAyQziosuJQeTICEQJKQXYBAjSYTEFHIkKAEJ0jA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data