Security Scan Report: globalpath.net

Submitted: Completed: publiccompleted
This website contacted 12 IPs in 2 countries across 12 domains to perform 63 HTTP transactions. The main domain is globalpath.net and was registered 6 years ago.

Submitted URL: https://globalpath.net

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Real Ugandan ISP site that appears compromised: CRITICAL IDS malware/exploit-kit alerts (EtherHiding exfil) and injected malicious third-party resources (wp-inject domains) make interaction unsafe.

Risk Factors (5)
Critical network IDS malware and exploit-kit alerts during page load
Multiple malicious third-party domains loaded/injected by the page (wp inject / exploit-kit clusters)
Blockchain RPC traffic matching an EtherHiding exfiltration pattern
Cross-origin POST to a threat-intel-flagged domain
Primary domain itself reported as a malware loader
Domain age information unavailable

Details

Page Title

Fast, Reliable Internet Solutions for Your Needs

Scan Type

public

Domain Name Analysis

Within the network infrastructure generic top-level domain (.net), 'globalpath.net' is registered with no subdomain. The second-level label 'globalpath' is 10 characters long split between 3 vowels and seven consonants. Tokenizing the label suggests two words: global, path. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

About Us Globalpath Globalpath Network Products And Solutions Industries Internet Packages Fastpath Network wor ala WORLD CLASS INTERNET SERVICES Welcome to Globalpath Network, your local Ugandan...

Page Load Overview

5.96s
Total Load Time
2.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:6,174 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software57% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
57%
government public service
36%
corporate business
36%
news/blog
35%
corporate
35%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8142.251.110.95Google · CDNUnited States
AS15169Google LLC
5192.185.5.87Ashburn, Virginia, United States
AS19871Network Solutions, LLC
5104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
5152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
5192.178.183.94Google · CDNUnited States
AS15169Google LLC
5142.250.154.95Google · CDNUnited States
AS15169Google LLC
5162.244.35.233Santa Clara, California, United States
AS14576Hosting Solution Ltd.
5142.251.110.94Google · CDNUnited States
AS15169Google LLC
5157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
6312--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DD01657F100CD426010672524DD6F92D541B642B7AB28D80E9E340A8EEF4752C0A1A4E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hlt/L0eKgy7vOvtMpN/NsnN/FpK2NgvflQW+ZhqJmwm/OqKfhWTvjsjG:hlnCvOvtMpN/inN/1mXlD+Z6RmWVh+WG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:777:AAAIgAAAACAAAAAAAIAAAABAQEAAAAAAAAAAAAAAgIAAAAAAIIgCAAABAAAAAEEAAAAAAAAAAAAAEAABAABAAAAAAAgAAQAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:10707129090303ff
Perceptual Hash:a944f43edb199c49
Difference Hash:e4c7c3d35bffd736
Wavelet Hash:107379392b0703ff
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data