Security Scan Report: notesbymoria.co.il

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 2 domains to perform 93 HTTP transactions. The main domain is notesbymoria.co.il.

Submitted URL: https://notesbymoria.co.il

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Page appears to be a self-branded Hebrew medical-exam prep site with no forms, but its primary domain is a multi-source content-malware indicator (ClearFake) and scripts hit BSC testnet RPC nodes. Do not interact.

Risk Factors (3)
Content-malware threat-intelligence match against the primary domain (clearfake, multi-source corroborated)
Hex-encoded content flagged by network IDS
Multiple blockchain RPC endpoints contacted by page scripts, atypical for the stated content
Domain age information unavailable

Details

Page Title

הכנה למבחני
הקבלה לרפואה

Scan Type

public

Domain Name Analysis

Within the Israeli country-code top-level domain (.co.il), 'notesbymoria.co.il' is registered while skipping any subdomain. Its registrable label 'notesbymoria' stretches across 12 characters holding five vowels versus seven consonants. Segmentation suggests 3 words: notes, by, moria. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://notesbymoria.co.il

Page Load Overview

3.94s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇮🇱Hebrew
Code: he
Confidence:80%
Script:Hebrew
Direction:rtl

Detection Details

HTML Lang Attribute:he-IL
Text Length:17,594 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate35% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate
35%
documentation technical
33%
blog personal website
33%
technology software
31%
news media journalism
30%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
103.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
10142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
10104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
103.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1052.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1015.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
10188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
939--

Detected Technologies12

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F8D2F7B3B0D518E53B5A9BFEC292325CC666D90DC606E7B9B1B4121C4EF41FA10B362D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:mHhXYhVF5jiP+OYxwcUCp19Ens2mYr2Q/r/ZdSZUaAGHkWq0:mHS5VA+OAwcUk1ssT6Zdypx9q0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30627:CCoLOFACJQKIAEAkklWEHFCMIln5iEV5kEgDgQmCUhEArSIBghUUXHgiZF9yABGAPGokAmoAaBERBmCAJAoMEQG0gCSjGKCg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:80808080e08080ff
Perceptual Hash:ff3f8c33803f8860
Difference Hash:2614010809152000
Wavelet Hash:83c08080e0fbdfff
Color Hash:N/A

Other Hashes

Crop Resistant:2614010809152000

Scan History

Scan history not available

Unable to load historical scan data