Security Scan Report: afr.com

Redirected to:
https://www.afr.com/
Site favicon
Submitted: Sep 19, 2026, 12:59:44 AMCompleted: Sep 19, 2026, 1:00:45 AMpubliccompleted

This website contacted 96 IPs in 7 countries across 81 domains to perform 270 HTTP transactions. The main domain is afr.com and was registered 9 years ago.

Submitted URL: https://afr.com

Effective URL:

https://www.afr.com/
Redirected

The Cisco Umbrella rank of the primary domain is #208,585 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 75%

7
Risk Score

AFR is a legitimate news site, but network IDS triggered three CRITICAL ET MALWARE WeyhroC2 C2 heartbeat alerts and JS uses 105 eval() calls. Avoid interaction until malware is resolved.

Risk Factors
3 CRITICAL network IDS alerts for ET MALWARE WeyhroC2 Heartbeat (malware command-and-control)
High number of eval() calls (105) indicating dynamic code execution
Domain age information unavailable

Details

Page Title

Financial Review - Business, Finance and Investment News | afr.com

Scan Type

public

Domain Name Analysis

Domain 'afr.com' uses the commercial generic top-level domain (.com) and has no subdomain. Count 3 characters in 'afr' holding 1 vowel versus 2 consonants. It segments into 1 word: afr. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://afr.com

Page Load Overview

8.94s
Total Load Time
6.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:85,899 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service78% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
78%
adult content
34%
education learning
33%
travel tourism
33%
documentation technical
31%

Detected Features

Search
Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
80146.75.122.133Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
2151.101.66.133Fastly · CDNUnited States
AS54113Fastly, Inc.
218.66.122.14Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2151.101.194.133Fastly · CDNUnited States
AS54113Fastly, Inc.
218.66.122.61Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2104.18.223.248Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.110.97Google · CDNUnited States
AS15169Google LLC
254.192.87.2Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
22.22.89.177Akamai · CDNVienna, Vienna, Austria
AS20940Akamai International B.V.
2192.178.183.102Google · CDNUnited States
AS15169Google LLC
27096--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F0E0D8DA5C71D0B4A8C5B7465FB87BAC84C742AB6CE2C989FDD540551100FE05C66552

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:h4hqIY2h/jLJLIZqY8H+seb5NjMfbvDLJLIZqY8H+sIOuB9d:hR4/RPH+sebfYz5PH+sJG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:3c9a57d3f21f90a039a4c40305790852

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00fffff3d38783
Perceptual Hash:bcc33ce49893e499
Difference Hash:0b2bb10007273737
Wavelet Hash:e500ffffc3818381
Color Hash:#ac535f

Scan History

Scan history not available

Unable to load historical scan data