Security Scan Report: pureshehad.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 4 countries across 8 domains to perform 180 HTTP transactions. The main domain is pureshehad.com and was registered 1 year 1 month ago.

Submitted URL: https://pureshehad.com

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Compromised-looking honey shop whose HTML carries an injected Macfinger ClickFix loader (AMOS stealer), confirmed by a CRITICAL kit-roster match and two CRITICAL IDS AMOS ClickFix alerts. Do not paste ClickFix instructions or run any downloaded script.

Risk Factors (4)
Known malicious ClickFix/AMOS stealer loader injected into the page (kit-roster CRITICAL, hunting rule-matched)
Two CRITICAL IDS malware alerts for the AMOS ClickFix campaign loader script
Third-party external host (silverrogpuia.pro) consistent with attacker-controlled loader infrastructure
Unverified single-source threat-intel report flagging the primary domain as malware
Domain age information unavailable

Details

Page Title

Pure Shehad

Scan Type

public

Domain Name Analysis

Domain 'pureshehad.com' uses the commercial generic top-level domain (.com) with no subdomain. Count 10 characters in 'pureshehad' with 4 vowels and 6 consonants. Word splitting yields three words: pure, she, had. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Bo HOME ABOUTUS —~FAQS.-—CONTACTUS. #& PURE SHEHAD f VISIT MORE >

Page Load Overview

14.01s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:6,266 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical58% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
58%
social_media
35%
forum
35%

Detected Features

Login Form
Search
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
26145.79.28.26Kuala Lumpur, Kuala Lumpur, Malaysia
AS47583Hostinger International Limited
22142.251.13.95Google · CDNUnited States
AS15169Google LLC
22147.45.37.168Russia
AS203273NetCrafters OU
22192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
22157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
22142.250.154.94Google · CDNUnited States
AS15169Google LLC
22157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
22142.251.110.95Google · CDNUnited States
AS15169Google LLC
1808--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EC645B36A45A2C61461F43D5F5663A58789E907FD685C0B8F6FE0E2CABC4DC4220F36E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:eoD/oWN4/4ckntk9kxDkUkUZKexOk5AkLkKWjiYS2i6s2Wrpvwp8PTKWxZ1p0oM7:PIx6GQLAPyEiYS2YbcsTKWw+YxJij2r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:314252:Yh4GTz1RgwhMkRFkEIACmtGIeNgTOGUABQyogKQFAhLDuhlUyVAkgAKMIhgIGQ6ECkGJChgkwcGMBBYq4g4ZuSaxjSAAAiSg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffffffc44000000
Perceptual Hash:d08d2f6090df2fd2
Difference Hash:c811419199864958
Wavelet Hash:fffffffc44000000
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data