Security Scan Report: msml.co.ke

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 4 domains to perform 28 HTTP transactions. The main domain is msml.co.ke and was registered 1 month ago.

Submitted URL: https://msml.co.ke

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Compromised site serving the ClearFake ClickFix loader (Polygon EtherHiding contract + rival-kit cleanup) alongside injected casino SEO spam. No forms, but confirmed malicious kit injection warrants avoidance.

Risk Factors (5)
Known malicious kit ClearFake (Polygon/EtherHiding contract loader) identified on the page
Secondary ClearFake cleanup script that blocks navigation and suppresses rival kits' overlays
Injected multilingual casino/gambling SEO spam on a milling company's domain — site appears compromised
Obfuscated inline JavaScript with encoding/decoding functions, corroborated by three IDS JavaScript-obfuscator hunting alerts
Domain only 29 days old with no reputation ranking
Domain age information unavailable

Details

Page Title

Megastar Millers Limited – Megastar Millers Limited

Scan Type

public

Domain Name Analysis

The domain 'msml.co.ke' uses the Kenyan country-code top-level domain (.co.ke) with no subdomain. The core label 'msml' covers 4 characters containing 0 vowels alongside 4 consonants. Splitting it apart reveals two words: ms, ml. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://msml.co.ke

Page Load Overview

3.88s
Total Load Time
921 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:4,023 chars
Detector Agreement:67%

Website Classification

Primary Category

finance banking76% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
76%
entertainment media
75%
gambling betting
75%
technology software
73%
news media journalism
71%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7172.93.102.39Piscataway, New Jersey, United States
AS23470ReliableSite.Net LLC
7142.251.110.95Google · CDNUnited States
AS15169Google LLC
7172.66.43.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.13.94Google · CDNUnited States
AS15169Google LLC
284--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B9733B32A2680D77E73F4769B8FA7B069F32D601DB074A5DB07A20A8E5D09F101A774D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:kYypfXaPCNpAkHJzYk2MGb/IYQlWOM/7t+aA27ao11nOxNZ5z/P0mMqrv1rR2:k5tfYQlNM/5krxVz/P0mMqrv1rM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:77308:pDoiilCgBjbMrECbBAqBkAVBBHDhhBCBagEJAFDhYjakAAIAkkJAiAY2j/K4ZQTpQREEMm5CQEhhRHcpwF1sGMuZNgkUAjAL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000000000000
Perceptual Hash:d522dc8c7333dc8c
Difference Hash:0000000808000000
Wavelet Hash:f2f2f8e0061e0e0e
Color Hash:N/A

Other Hashes

Crop Resistant:0000000808000000

Scan History

Scan history not available

Unable to load historical scan data