Security Scan: https://www.nahr-iq.org

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/28c258fe-a680-47f8-93e9-900e18da0841 Domain and IP registration (RDAP)/api/v1/rdap/28c258fe-a680-47f8-93e9-900e18da0841 Certificate Transparency/api/v1/ct/nahr-iq.org How often this domain was scanned/api/v1/domain/stats/nahr-iq.org Scan history for this domain/api/v1/domain/history/nahr-iq.org?limit=15

This website contacted 10 IPs in 2 countries across 7 domains to perform 22 HTTP transactions. The main domain is nahr-iq.org and was registered 5 years ago.

Submitted URL: https://www.nahr-iq.org

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised human-rights site now serving a CRITICAL ClickFix/EtherHiding kit: fake Cloudflare 'Human Verification' overlay pushes Win+X Terminal command execution, with malware IoCs on the primary domain and CRITICAL IDS alerts.

Risk Factors (7)

Known ClickFix Win+X Terminal overlay phishing kit injected into the page (roster-anchored, CRITICAL)

EtherHiding / blockchain contract loader retrieving a second-stage payload from a Polygon contract

Obfuscated JavaScript concealing threat-feed command-and-control hosts (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co)

Primary domain flagged as malware by two independent threat-intelligence feeds

Multiple CRITICAL IDS malware/exploit-kit alerts for ClickFix and EtherHiding traffic

Injected gambling/SEO spam content unrelated to the site's human-rights subject matter

Fake 'Human Verification'/Cloudflare-style overlay socially engineering the user to execute a command

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Favicon Hash

MMH3: -2003579531

MD5: 473ad8c2c00edcc8771be39f73d96052

Domain Name Analysis

The domain 'www.nahr-iq.org' uses the non-profit oriented generic top-level domain (.org), featuring subdomain 'www'. The second-level label 'nahr-iq' is 7 characters long split between 2 vowels and 4 consonants, along with one hyphen. Splitting it apart reveals 2 words: nahr, iq. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.11s

Total Load Time

416 KB

Total Size

Language Analysis

Primary Language

🇸🇦Arabic

Code: ar

Confidence:60%

Script:Arabic

Direction:rtl

Detection Details

Text Length:5,134 chars

Detector Agreement:67%

Website Classification

Primary Category

documentation technical100% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

100%

technology software

100%

cryptocurrency blockchain

97%

gambling betting

97%

forum community discussion

91%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.21.58.227Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
2	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
2	104.21.43.137Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
2	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.180.48Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
22	10	-	-