Security Scan Report: web-solution.hu

Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 2 countries across 7 domains to perform 46 HTTP transactions. The main domain is web-solution.hu.

Submitted URL: https://web-solution.hu

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Legitimate-looking Hungarian web agency site that has been compromised and serves a CRITICAL ClickFix/EtherHiding malware loader with blockchain stage retrieval; critical IDS alerts and multi-source threat-intel matches confirm malicious content.

Risk Factors (5)
Known ClickFix EtherHiding loader injected into a compromised site (CRITICAL kit roster match)
CRITICAL network IDS alerts for malware EtherHiding exfiltration and ClickFix C2 domain
Obfuscated JavaScript concealing threat-feed hosts decoded only after deobfuscation
Blockchain-based dead-drop stage retrieval (Ethereum Sepolia smart contract)
Multi-source threat-intel match on the third-party domain zvh4[.]com loaded by the page
Domain age information unavailable

Details

Page Title

Teljeskörű online megoldások | Web Solution

Scan Type

public

Domain Name Analysis

The domain name 'web-solution.hu' uses the Hungarian country-code top-level domain (.hu) while skipping any subdomain. Count 12 characters in 'web-solution' with 5 vowels and six consonants; bonus characters include one hyphen. Segmentation suggests two words: web, solution. Expect 5.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://web-solution.hu

Page Load Overview

2.31s
Total Load Time
3.5 MB
Total Size

Language Analysis

Primary Language

🇭🇺Hungarian
Code: hu
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:hu
Text Length:2,429 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software61% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
61%
corporate business
48%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
662.112.194.106Hungary
AS197248Dravanet Co Ltd.
4142.251.110.95Google · CDNUnited States
AS15169Google LLC
4142.251.150.119Google · CDNUnited States
AS15169Google LLC
4142.250.154.94Google · CDNUnited States
AS15169Google LLC
4192.178.183.94Google · CDNUnited States
AS15169Google LLC
4142.251.152.119Google · CDNUnited States
AS15169Google LLC
4104.26.12.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.157.119Google · CDNUnited States
AS15169Google LLC
4142.251.153.119Google · CDNUnited States
AS15169Google LLC
4611--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F0131A7210DC2CAB23274381B0727F0C92AF9C33DA6A9896F67B15586695ED36407A37

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:Rbpc0zDBR+V+r7VH9rQVTtifL/CRgQ7oWkx2q6prvKJ+b0vLB1u:XF7d9JLTxWrvKR1u

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:44496:nBxJCCSMdwQEJFcBYQDGAG8sWgsgBoMSBBWQBIAgnERCiDAoCYNghjEAk8ZcEuTEAHEIHIocArkphhBAEOsIKEguAkCQjgHW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcdd8f8f8f8c7c3
Perceptual Hash:f89bb4c7a5874858
Difference Hash:121931131253afb6
Wavelet Hash:ffcdd8d8f8f80100
Color Hash:#4046bf

Other Hashes

Crop Resistant:121931131253afb6

Scan History

Scan history not available

Unable to load historical scan data