Security Report: firstcallkuwait.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/18888b6c-89a0-441e-b4fb-acd1f706d32e Domain and IP registration (RDAP)/api/v1/rdap/18888b6c-89a0-441e-b4fb-acd1f706d32e Certificate Transparency/api/v1/ct/firstcallkuwait.com How often this domain was scanned/api/v1/domain/stats/firstcallkuwait.com Scan history for this domain/api/v1/domain/history/firstcallkuwait.com?limit=15

This website contacted 36 IPs in 3 countries across 20 domains to perform 184 HTTP transactions. The main domain is firstcallkuwait.com and was registered 17 years ago.

Submitted URL: https://firstcallkuwait.com

AI Security Verdict

Confirmed Scam

Confidence: 94%

Risk Score

Legitimate-looking Kuwait electrician site whose WordPress pages carry appending ClickFix/ErrTraffic-Exvicy malware kits, malicious third-party scripts and EtherHiding IDS traffic. Compromised host serving malware — do not interact.

Risk Factors (5)

Analyst-vetted malicious kit roster hits (ClickFix FakeCAPTCHA, ErrTraffic/Exvicy WordPress injected loader, Win+X / macOS Terminal lures) present in the page body

Multiple CRITICAL high-precision YARA matches on the served HTML indicating a compromised WordPress site injecting a ClickFix malware loader

CRITICAL IDS alert for EtherHiding exfiltration and Spamhaus-listed traffic

Threat-intel reports of malware/IClickFix against the primary domain and scanned URL

Page loads scripts and beacons from several multi-source-flagged malicious third-party domains

Domain age information unavailable

Details

Page Title

Home - فيرست كول الكويت

Scan Type

public

Favicon Hash

MMH3: 1869218834

MD5: a5558d6084b3c737cacda8cced4369d3

Domain Name Analysis

The domain name 'firstcallkuwait.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'firstcallkuwait' spans 15 characters holding 5 vowels versus ten consonants. Breaking it apart gives 3 words: first, call, kuwait. Median word length comes out to five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

14.47s

Total Load Time

4.3 MB

Total Size

Language Analysis

Primary Language

🇸🇦Arabic

Code: ar

Confidence:60%

Script:Arabic

Direction:rtl

Detection Details

HTML Lang Attribute:en-US

Text Length:5,116 chars

Detector Agreement:100%

Language mismatch: Declared as en-US but detected as ar

Website Classification

Primary Category

corporate business100% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

100%

government public service

100%

real estate property

99%

technology software

99%

documentation technical

99%

Detected Features

OG: article

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	198.251.89.200	Luxembourg, Luxembourg, Luxembourg	AS53667FranTech Solutions
5	104.26.9.123Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.251.20.95Google · CDN	United States	AS15169Google LLC
5	142.251.20.97Google · CDN	United States	AS15169Google LLC
5	142.251.14.156Google · CDN	United States	AS15169Google LLC
5	35.208.237.19Google · CDN	Council Bluffs, Iowa, United States	AS15169Google LLC
5	104.21.3.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	216.239.32.36Google · CDN	United States	AS15169Google LLC
5	142.251.157.119Google · CDN	United States	AS15169Google LLC
5	142.251.20.148Google · CDN	United States	AS15169Google LLC
184	36	-	-