Security Report: uhro-sl.org - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e008ba44-4c2c-4966-8bd7-acb5d3e65f0d Domain and IP registration (RDAP)/api/v1/rdap/e008ba44-4c2c-4966-8bd7-acb5d3e65f0dHow often this domain was scanned/api/v1/domain/stats/uhro-sl.org Scan history for this domain/api/v1/domain/history/uhro-sl.org?limit=15

This website contacted 6 IPs in 1 country across 5 domains to perform 198 HTTP transactions. The main domain is uhro-sl.org and was registered 1 year 7 months ago.

Submitted URL: https://uhro-sl.org

AI Security Verdict

High Risk

Confidence: 90%

Risk Score

Legitimate human-rights organisation site compromised and serving the analyst-vetted ClearFake EtherHiding loader with hidden blockchain RPC endpoints and injected casino SEO spam; do not browse.

Risk Factors (5)

Compromised site actively serving the ClearFake blockchain-contract loader (EtherHiding) — high-confidence malicious kit identification

Obfuscated script hides known-abusive RPC/blockchain endpoints (1rpc.io, polygon.drpc.org, polygon.publicnode.com) decoded at runtime

Primary domain carries a malware-loader threat-intelligence report

Hidden injected SEO spam (Polish/Japanese online-casino copy) inconsistent with the visible human-rights content

Domain absent from Cisco Umbrella top 1M, limiting reputation reassurance

Domain age information unavailable

Details

Page Title

United Human Rights Organization – Duty Before Rights. Justice for All.

Scan Type

public

Favicon Hash

MMH3: -1892343768

MD5: d34ef2704882d79210b9bddc90098660

Domain Name Analysis

Domain 'uhro-sl.org' uses the non-profit oriented generic top-level domain (.org) while skipping any subdomain. The second-level label 'uhro-sl' is 7 characters long split between 2 vowels and 4 consonants, notching 1 hyphen. Tokenizing the label suggests three words: u, hro, sl. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.24s

Total Load Time

9.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:15,936 chars

Detector Agreement:75%

Website Classification

Primary Category

unknown0% confidence

Type: spa

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
33	198.54.116.69	United States	AS22612Namecheap, Inc.
33	142.251.14.95Google · CDN	United States	AS15169Google LLC
33	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
33	142.250.154.94Google · CDN	United States	AS15169Google LLC
33	104.21.3.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
33	192.0.77.48	San Francisco, California, United States	AS2635Automattic, Inc
198	6	-	-