Security Scan Report: wgames.unaux.com

Redirected to:
https://wgames.unaux.com/?i=1
Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 10 domains to perform 29 HTTP transactions. The main domain is unaux.com and was registered 10 years ago.

Submitted URL: https://wgames.unaux.com

Effective URL:
https://wgames.unaux.com/?i=1
Redirected

The Cisco Umbrella rank of the primary domain is #664,966 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Hijacked free-subdomain WordPress stub serving a ClearFake/ClickFix malware chain: two multi-source malware Indicators of Compromise loaded cross-origin (cosmical2049.com, interseq.at), designerlink.su scripts, and EtherHiding exfiltration IDS alerts. Avoid.

Risk Factors (5)
Page content is a bare default WordPress 'Hello world!' blog titled 'Day Care Services' with an unrelated 'Mindblown: a blog about philosophy' header — a hijacked/abandoned free subdomain, not a real site
ClearFake-family indicator on the scanned domain combined with ClickFix and EtherHiding network alerts
Cryptocurrency/blockchain RPC and Tenderly gateway endpoints plus EtherHiding exfiltration alerts indicate a blockchain-based malware loader chain
Free instant-subdomain hosting (unaux.com): apex age is the platform's, so the page's true age is unknown
Multiple third-party content-malware Indicators of Compromise loaded cross-origin (cosmical2049.com, interseq.at)
Domain age information unavailable

Details

Page Title

Day Care Services

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'wgames.unaux.com' is registered, featuring subdomain 'wgames'. The registrable portion 'unaux' spans 5 characters with three vowels and two consonants. Breaking it apart gives 2 words: un, aux. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://wgames.unaux.com

Page Load Overview

3.24s
Total Load Time
360 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:301 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software56% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
56%
blog personal website
39%
documentation technical
35%
adult content
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11185.27.134.34United Kingdom
AS34119Wildcard UK Limited
2104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2109.120.186.87London, England, United Kingdom
AS210644Aeza Group LLC
2172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
235.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2172.67.130.228Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.3.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2910--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C2E4F55BEBC0CF29D50D5DE6C2127A2B17F4CE7BB52170FEAB919BC6740C8922438925

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:SzhBLzgU3bxDG4s57yf3i1e9567xfaEjP75mvNMVTmjeidx:SzhBLzgMbff3oeS7xfaE/5mvvjea

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:664503:A0DiIAhScAwIEIAYXEBxKYhDAswA5UDgCGAkAoROgjRQFYAgYFQLQYBjOICaCQPTFMyFmngCUScIRAE5JIAaQDgFv7SAwmIQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffcfc3c7cfffff
Perceptual Hash:b133cecc313399c9
Difference Hash:0000181c18100000
Wavelet Hash:fcfcccc0c0c0f0f0
Color Hash:#d279cb

Other Hashes

Crop Resistant:0000181c18100000

Scan History

Scan history not available

Unable to load historical scan data