Security Scan Report: nasirullah.org

Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 2 countries across 10 domains to perform 212 HTTP transactions. The main domain is nasirullah.org and was registered 1 year 4 months ago.

Submitted URL: https://nasirullah.org

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Legitimate masjid site whose HTML is compromised: analyst-vetted ClearFake loader kit and a cross-origin beacon to ferma.seo-solutions.eu.cc. No forms or impersonation, but visitors may be pushed into a malware/ClickFix chain — avoid visiting.

Risk Factors (4)
Analyst-vetted ClearFake malicious kit detected in page HTML (EtherHiding smart-contract loader chain)
Injected cross-origin POST beacon to ferma.seo-solutions.eu.cc (unrelated third-party host) from an inline script
Single-source unverified malware (loader) threat-intel match on the primary domain
HIGH-severity IDS alert for .cc TLD DNS query tied to the loader host
Domain age information unavailable

Details

Page Title

Nasirullah | Welcome to the Nasirullah

Scan Type

public

Domain Name Analysis

Within the non-profit oriented generic top-level domain (.org), 'nasirullah.org' is registered and has no subdomain. The core label 'nasirullah' covers 10 characters containing 4 vowels alongside six consonants. Splitting it apart reveals 2 words: nasir, ullah. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nasirullah.org

Page Load Overview

25.44s
Total Load Time
2.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,054 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16172.233.205.66Ashburn, Virginia, United States
AS63949Akamai Connected Cloud
14104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14142.251.157.119Google · CDNUnited States
AS15169Google LLC
1413.226.244.55Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1452.222.214.14Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
14142.251.110.94Google · CDNUnited States
AS15169Google LLC
14104.21.58.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14142.251.14.94Google · CDNUnited States
AS15169Google LLC
14142.251.154.119Google · CDNUnited States
AS15169Google LLC
1413.226.244.110Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
21215--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DF340B9F573E347071070AC579EAB728A5AD8033595284E1FD7ED8688FC2D6302BA72D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:eNNtA/9ETZwX4k8D1ADqK+N37dddSMX4QAq3NXWTxxkVB7yp5BuO7aMYfG:7/9so4kfqKsdddSNEa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:240992:UKLIUIEiLAUfCCmwCKIguBJkIkNMgCGggTRFBk6L4mBx1hREIFILC4AKDANICgIAQpMhFW5SnqVEUaWABVgKNgACIFFEQTBk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f9ffffff8181c3ff
Perceptual Hash:e9c3d269c3926969
Difference Hash:1b00020013131b10
Wavelet Hash:c0fefefe808080ee
Color Hash:#1f5393

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data