Security Scan Report: forkan2.com

Redirected to: https://forkan2.com/

Submitted: Mar 14, 2026, 10:50:03 AMCompleted: Mar 14, 2026, 10:51:12 AMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 2 countries across 5 domains to perform 9 HTTP transactions. The main domain is forkan2.com and was registered NaN years ago.

Submitted URL: http://forkan2.com/

Effective URL: https://forkan2.com/Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

New site with a password‑only form likely harvesting credentials; classified as confirmed phishing scam.

Risk Factors
Password field without accompanying username/email field (credential harvesting pattern)
Brand‑new domain (<7 days) hosting a login form
Single isolated password form – no other legitimate site content
Domain age information unavailable

Details

Page Title

نظام إدارة السجلات

Scan Type

public

Language

🇸🇦

Arabic

(80% confidence)

Category

technology software

(62%)

Domain Information

The domain name 'forkan2.com' uses the commercial generic top-level domain (.com) without a subdomain. The core label 'forkan2' covers 7 characters split between 2 vowels and 4 consonants; it also includes one digit. Segmentation suggests three words: fork, an, 2. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://forkan2.com/

Page Load Overview

1.07s
Total Load Time
8
HTTP Requests
5
Domains
97 KB
Total Size

Language Analysis

Primary Language

🇸🇦Arabic
Code: ar
Confidence:80%
Script:Arabic
Direction:rtl

Detection Details

Language Code:ar
Detection Confidence:80%
Script Type:Arabic
HTML Lang Attribute:ar
Text Length:281 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software62% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
62%
government public service
32%
documentation technical
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
492.113.16.254Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
1104.18.0.22United States
1104.17.25.14United States
AS13335Cloudflare, Inc.
1104.16.174.226United StatesUnknown
1172.67.172.85United States
AS13335Cloudflare, Inc.
85--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13D93B45134F514719977A4AAF38B4B2D76B0D803D64EDA443EEC16D04FCAEF2C8A7298

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:kiZpOl7lq9HKcwYtk889X7eQJoRrWHoI9G9P0MJ91PV8vxGCp11YaDqm:4qtpYX7eQJohf0Q91PV8vxGCp11l

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:92032:QAE6wYASjEFoh04LYGUIDDUMxAaIFEAYAqJZAFIBaTLuA0AHDEDRgALRUYFiMiyBABiMQkeqg4gCcIMBJ9iD0A6JLgACgDpq

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:01031b1f1f1f0f1f
Perceptual Hash:881d3366ccd9cc5d
Difference Hash:fffff3b3b3f3ffff
Wavelet Hash:01031b1f1f1f1f1f
Color Hash:#b387c5

Scan History

Scan history not available

Unable to load historical scan data