Is hjvfthhuiff.onion safe?
http://hjvfthhuiff.onion/
Checked on
How we checked
Coverage: partial · 3 of 5 applicable core capabilities
- Antivirus (56 of 93 engines answered): completed
- Google Safe Browsing: completed
- page reading · not run: did not fully complete
- page capture · not available: did not fully complete
- domain records · not run: did not fully complete
- web research: completed
Nonstandard onion address with one isolated suspicious result
The supplied hostname is much shorter than the documented 56-character format for a v3 onion address. Its scan record also contains one suspicious result among 93 engines, but there is no detection consensus, and the available evidence does not establish a specific scam or malicious mechanism.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 58/100
Moderate Risk covers scores 45–69. 2 findings pulled the score down; 1 pushed it up.
What pulled the score down
- ModerateOne antivirus engine marked the URL suspicious, while 92 did not produce the same verdict.-15 pts
- ModerateOne public warning in public web research: "A v3 .onion address is derived from an ed25519 public key. The 56-character address encodes the public key (32 bytes), a checksum (2 bytes), and a version…"-14 pts
What pushed the score up
- SupportsThe browsing-safety check returned no threat warning.
Points come from the saved evidence ledger: it lowered the score from 87 to 58 and split those 29 points between the findings that show points; the others carry no points in the ledger. Community reviews never change the Safety Score.
01 · Investigation Brief
Investigation Brief
The supplied hostname is much shorter than the documented 56-character format for a v3 onion address. Its scan record also contains one suspicious result among 93 engines, but there is no detection consensus, and the available evidence does not establish a specific scam or malicious mechanism.
The address does not match the documented v3 format
Current v3 onion addresses use 56 characters to encode a public key, checksum, and version byte. The supplied hostname does not have that form, so visitors should verify that the address was copied correctly before relying on it.
Security checks are mixed but inconclusive
One out of 93 antivirus engines marked the URL suspicious, with no broader consensus. This is a caution signal rather than proof of malicious activity.
A separate browsing-safety check returned no threat warning, but that clean result does not validate the address or establish who operates it.
Why the score is 58
One antivirus engine marked the URL suspicious, while 92 did not produce the same verdict. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
1/ 93
detectionsFresh result
1 engine flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 0
- Suspicious
- 1
- Total
- 93
| Engine | Finding |
|---|---|
| LevelBlueSuspicious | suspicious |
All 93 engine results
- LevelBlue - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Unrated
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Unrated
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- Forcepoint ThreatSeekerproxy avoidance
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
03 · Investigation Story
Investigation story
What the site claims
No page claim could be verified for hjvfthhuiff.onion because no usable page content or saved capture was available.
What we observed
The page itself could not be fully inspected, so the report relies on the other saved checks.
What independent research found
1 external finding was saved and compared with the page evidence.
What remains unverified
2 of the 5 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
Web research findings
Independent findings for hjvfthhuiff.onion, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- Dark Web 101open
"A v3 .onion address is derived from an ed25519 public key. The 56-character address encodes the public key (32 bytes), a checksum (2 bytes), and a version byte, all base32 encoded."
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Evidence Ledger
Evidence ledger
- Antiviruscomplete
- Browser threat feedcomplete
- Page contentnot run
- Analysiscomplete
- Visual evidenceunavailable
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
One antivirus engine marked the URL suspicious, while 92 did not produce the same verdict.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
One public warning in public web research: "A v3 .onion address is derived from an ed25519 public key. The 56-character address encodes the public key (32 bytes), a checksum (2 bytes), and a version…"
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 1 of 93 engines flagged | Completed | Adverse | fresh · analysed Oct 15, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 15, 2026 |
| Page content | Page content was not available for semantic review | Unavailable | No saved finding | Not available |
| Visual evidence | The saved page capture was not reliable enough to use | Unavailable | No saved finding | Not available |
| Independent research | 1 independent finding was saved | Completed | Adverse | this scan · Oct 15, 2026 |
- Antivirus
- Result1 of 93 engines flagged
- CompletionCompletedFindingAdverse
- Freshnessfresh · analysed Oct 15, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 15, 2026
- Page content
- ResultPage content was not available for semantic review
- CompletionUnavailableFindingNo saved finding
- FreshnessNot available
- Visual evidence
- ResultThe saved page capture was not reliable enough to use
- CompletionUnavailableFindingNo saved finding
- FreshnessNot available
- Independent research
- Result1 independent finding was saved
- CompletionCompletedFindingAdverse
- Freshnessthis scan · Oct 15, 2026
06 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is hjvfthhuiff.onion a scam or is it safe?
Is hjvfthhuiff.onion safe to use?
Has hjvfthhuiff.onion been flagged by antivirus engines?
Is hjvfthhuiff.onion on any phishing or malware blacklists?
How often is the hjvfthhuiff.onion report updated?
07 · Final Verdict
Final verdict
Nonstandard onion address with one isolated suspicious result
The written conclusion remains part of the saved report.
The supplied hostname is much shorter than the documented 56-character format for a v3 onion address. Its scan record also contains one suspicious result among 93 engines, but there is no detection consensus, and the available evidence does not establish a specific scam or malicious mechanism.
08 · Community
Community
Are you the owner of hjvfthhuiff.onion?Verify and reply