ScanMalware.com

Security Scan Report: angelsnpact.org

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/30f23e00-21cb-4db8-a8bf-42131411935fDomain and IP registration (RDAP)/api/v1/rdap/30f23e00-21cb-4db8-a8bf-42131411935fHow often this domain was scanned/api/v1/domain/stats/angelsnpact.orgScan history for this domain/api/v1/domain/history/angelsnpact.org?limit=15
This website contacted 26 IPs in 4 countries across 17 domains to perform 118 HTTP transactions. The main domain is angelsnpact.org and was registered 5 years ago.

Submitted URL: https://angelsnpact.org

AI Security Verdict

High Risk

Confidence: 93%

9
Risk Score

Legitimate Atlanta youth-homelessness nonprofit whose WordPress install is compromised: an ErrTraffic/Exvicy ClickFix loader uses EtherHiding and malicious script hosts to serve malware to visitors. Do not interact.

Risk Factors (5)
Compromised WordPress site injecting the ErrTraffic/Exvicy ClickFix loader into every page
EtherHiding: next-stage payload address pulled from a blockchain smart contract to evade takedown
Multiple malicious third-party script hosts (claritydelivr, quickdelivr, caffe-img) delivering PowerShell injector / ClickFix payloads
Obfuscated JavaScript concealing blockchain RPC and threat-feed endpoints
Threat-intel match on the primary domain itself (iclickfix) in addition to the loaded resources
Domain age information unavailable

Details

Page Title

angelsnpact

Scan Type

public

Domain Name Analysis

You're looking at domain 'angelsnpact.org' on the non-profit oriented generic top-level domain (.org) while skipping any subdomain. The core label 'angelsnpact' covers 11 characters holding 3 vowels versus eight consonants. It segments into 3 words: angels, n, pact. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://angelsnpact.org

Page Load Overview

90.43s
Total Load Time
6.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:7,437 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content36% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
36%
social_media
25%
forum
20%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1874.208.236.19United States
AS8560IONOS SE
4190.115.18.105United Arab Emirates
AS59692IQWeb FZ-LLC
4172.217.208.95Google · CDNUnited States
AS15169Google LLC
4142.251.110.97Google · CDNUnited States
AS15169Google LLC
495.129.234.18Russia
AS57724Ddos-guard Ltd
4192.178.183.113Google · CDNUnited States
AS15169Google LLC
452.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
43.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.20.94Google · CDNUnited States
AS15169Google LLC
11826--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14114A7729544A42682974BC8B161730863AAF31DCBC206D4BEFCDBE5DBCDEE54532B84

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:owpxX5xpaPE4+C9GjLqZKfQroqlGuZgqtS/OCcgvMyokTye+9YN9Yn9Yl9Ym9YA/:vpxbpCv9GPqZKfQroqlGRt/OCcgvMyo+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:193578:CjB0gJPTS/1AmDARCABVVCJgTHKxcKADiZV4AGzXhMEgUMEWBQEoBB+BitALJgAAhGnjAGsQIBRAMEAmpweCgTJhIhBAOojA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00027c6060767eef
Perceptual Hash:874e384473cbce4b
Difference Hash:dcc4e0c9cce4dcce
Wavelet Hash:00027f6860767fef
Color Hash:#b8d279

Other Hashes

Crop Resistant:a5a5110161c1e1e1,f8f8f973e4e0e4e5,898b848c9ca62727,0000000000000000,dcc4e0c8cce4dcce

Scan History

Scan history not available

Unable to load historical scan data