Security Scan Report: hgwc.in

Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 3 countries across 11 domains to perform 207 HTTP transactions. The main domain is hgwc.in and was registered 14 years ago.

Submitted URL: https://hgwc.in

AI Security Verdict

High Risk

Confidence: 90%

8
Risk Score

Legitimate 2011-founded Muslim charity site whose pages have been compromised with an injected ClickFix/EtherHiding loader that pulls payloads from Polygon contracts; visitors face a fake 'Human Verification' overlay and malware risk. Avoid until cleaned.

Risk Factors (5)
Known malicious ClickFix/Win+X 'Human Verification' overlay kit injected into the page HTML
EtherHiding blockchain-based loader retrieving its payload address from a smart contract
Obfuscated script hiding threat-intelligence-flagged hosts (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co)
CRITICAL IDS alert for EtherHiding exfiltration and blockchain RPC traffic
Unranked script host cloud-browse.codes delivering code to visitors
Domain age information unavailable

Details

Page Title

Home - Human Guidance and Welfare Centre

Scan Type

public

Domain Name Analysis

Within the Indian country-code top-level domain (.in), 'hgwc.in' is registered with no subdomain. Count 4 characters in 'hgwc' split between 0 vowels and four consonants. Breaking it apart gives two words: hg, wc. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hgwc.in

Page Load Overview

6.00s
Total Load Time
5.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:4,556 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning65% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
65%
corporate
35%
news/blog
20%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
27118.139.181.148Singapore, Singapore
AS26496GoDaddy.com, LLC
15172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15142.251.14.95Google · CDNUnited States
AS15169Google LLC
15142.251.13.97Google · CDNUnited States
AS15169Google LLC
15192.64.117.116United States
AS22612Namecheap, Inc.
1523.207.210.148Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
15142.251.14.94Google · CDNUnited States
AS15169Google LLC
15216.239.34.36Google · CDNUnited States
AS15169Google LLC
15104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
20713--

Detected Technologies6

WordPressv7.1.3
100%
JQueryv3.7.1
100%
100%
Bootstrapv1.0.0
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ED240773765E083A521B11CEA056334D64EFDA76D62140F6FBFF82A953D8CD0326362A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:1zJT16dl6D83ppLT6xBT1Dfy/AJxAtPOCweTVaWoVi1cF9+0doH/UhnzLpGNNT3O:19B8hCV4g9+0doAzcLfTZa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:225577:CBKQ6QcKBZCSQBFBWuBYXSAuwIxCRMUAFKYDiEAjOggAGxkCpBAQwomDISRENSJIVSkHAYMTABFkAHcJFGohBYAigyHAGTJF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data