Security Report: nspublic26.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4cfa6036-e611-45df-9db7-5f5d5e80ddc9 Domain and IP registration (RDAP)/api/v1/rdap/4cfa6036-e611-45df-9db7-5f5d5e80ddc9How often this domain was scanned/api/v1/domain/stats/nspublic26.com Scan history for this domain/api/v1/domain/history/nspublic26.com?limit=15

This website contacted 7 IPs in 2 countries across 5 domains to perform 78 HTTP transactions. The main domain is nspublic26.com and was registered 4 years ago.

Submitted URL: https://nspublic26.com

AI Security Verdict

High Risk

Confidence: 84%

Risk Score

Legitimate-looking Noida school site whose scripts carry an obfuscated EtherHiding loader pulling next-stage code from a blockchain contract, with a CRITICAL malware IDS alert and a malware flag on the primary domain — likely compromised; no forms present.

Risk Factors (5)

EtherHiding loader hidden in obfuscated JavaScript retrieving payloads from a blockchain contract

CRITICAL IDS malware alert for EtherHiding exfiltration

Primary domain flagged as malware (iclickfix) by threat intelligence (single-source)

Deobfuscation reveals concealed connections to known-attacker and malware-tagged hosts

Likely compromised WordPress/theme ('Powered by Starshed') injecting the loader

Domain age information unavailable

Details

Page Title

NSPublic School – Noida

Scan Type

public

Favicon Hash

MMH3: 393669773

MD5: fff0ec8b2de28c5557f68d12dd0fcfbd

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'nspublic26.com' is registered. The second-level label 'nspublic26' is 10 characters long containing two vowels alongside 6 consonants, plus 2 digits. Tokenizing the label suggests 3 words: ns, public, 26. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Gallery + Login About + Mandatory Public Disclosure ~ Admission ~ Contact Events NSPublic School Registration for Nursery Admissions 2026 - 27

Page Load Overview

5.80s

Total Load Time

2.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:4,712 chars

Detector Agreement:100%

Website Classification

Primary Category

education learning96% confidence

Type: spa

Method: ml+structural

All Detected Categories

education learning

96%

government public service

79%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	104.21.78.167Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	142.251.20.95Google · CDN	United States	AS15169Google LLC
11	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	142.251.14.94Google · CDN	United States	AS15169Google LLC
11	172.67.136.2Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	37.72.140.76	Russia	AS211663GALEON LLC
78	7	-	-