Security Scan Report: onko-stop.lt

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is onko-stop.lt and was registered 1 month ago.

Submitted URL: https://onko-stop.lt/

AI Security Verdict

Low Risk

Confidence: 55%

3
Risk Score

Two-day-old unranked domain serving a bare 18+ age gate with no relation to its name. No forms, no Indicators of Compromise, no malware or IDS hits — only new-domain and cloaking-style script signals.

Risk Factors (3)
Very newly registered domain (2 days old) with no established reputation
Opens with an age/confirmation interstitial that redirects to undisclosed adult content
Encoding/decoding inline script behavior with no legitimate functional need on an age gate
Safety Factors (6)
No Indicators of Compromise matched against the page or its resources
No JavaScript malware / YARA patterns detected
No network IDS alerts (no phishing, malware, or C2 signatures)
No credential-harvesting or payment forms; no cross-origin credential exfiltration
No brand impersonation detected — '18+ Access' is generic, not another entity's brand
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

18+ Access

Scan Type

public

Domain Name Analysis

The domain 'onko-stop.lt' uses the Lithuanian country-code top-level domain (.lt) while skipping any subdomain. Count 9 characters in 'onko-stop' split between three vowels and 5 consonants, along with one hyphen. Tokenizing the label suggests 3 words: on, ko, stop. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://onko-stop.lt/

Page Load Overview

0.75s
Total Load Time
38 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:65%
Script:Latin
Direction:ltr

Detection Details

Text Length:130 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content100% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

adult content
100%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2172.67.160.79Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.14.199Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
42--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F75223E2EE630945746788487F9BD64A315C94438507DA2D7F8E728CDF852EDE2B2B0C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:9vRRldcF05d/z5ZHd/nJU2a6Xe7qizKTeINESMm+i33+vvFjfnD7zCyD74SZ/nMy:HTJDe7J/m+ieFvSmcSdnclBEr9a2DRuu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14042:IrTFsqtKUIYEYEEAc5nQ9e5BBUAG2D+glCEDoshjQAA8AgRKQHAiEXjCbSVgIiTBghAT2lIISYhskeFW1aAMGZAAAGY6qaOJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000003c3c000000
Perceptual Hash:8822228888222288
Difference Hash:0000003030000000
Wavelet Hash:00003c3c3c3c0000
Color Hash:#87a5c5

Other Hashes

Crop Resistant:0000003030000000

Scan History

Scan history not available

Unable to load historical scan data