ScanMalware.com

Security Scan Report: narowalgymkhana.com

Site favicon
Submitted: Oct 12, 2026, 2:03:29 AMCompleted: Oct 12, 2026, 2:04:12 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Legitimate-looking club site compromised to host a ClickFix fake-CAPTCHA LOLBin kit; threat intel flags the primary domain as iclickfix malware. Do not follow any 'verify you are human' steps — avoid interaction.

Risk Factors (4)
Known malicious ClickFix FakeCAPTCHA (LOLBin variant) phishing kit detected on the page (analyst-vetted ground truth)
Fake CAPTCHA 'Verify you are human / I'm not a robot' prompt designed to make users execute a malicious command
Primary domain flagged in threat intelligence as 'iclickfix (malware)'
Apparent compromise of a legitimate club website to deliver malware
Domain age information unavailable

Details

Page Title

Narowal Gymkhana

Scan Type

public

Domain Name Analysis

Domain 'narowalgymkhana.com' uses the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'narowalgymkhana' spans 15 characters containing 5 vowels alongside ten consonants. Tokenizing the label suggests four words: narowal, gym, khan, a. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://narowalgymkhana.com

Page Load Overview

6.29s
Total Load Time
3.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,411 chars
Detector Agreement:67%

Website Classification

Primary Category

government public service73% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
73%
documentation technical
53%
social media network
52%
entertainment media
52%
adult content
38%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13162.55.20.122Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
10142.251.20.95Google · CDNUnited States
AS15169Google LLC
10142.251.14.94Google · CDNUnited States
AS15169Google LLC
10104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1052.63.121.74Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
10142.251.155.119Google · CDNUnited States
AS15169Google LLC
10142.251.13.103Google · CDNUnited States
AS15169Google LLC
737--

Detected Technologies7

WordPressv7.1.3
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
HTTP/3
40%
WooCommerce
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14163C873C049103F271BA6DFA820B35DE299673BDE06D9A5BBFE248CD380DD511A660D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:wIypsQR6wgs49x7QnerlcJ5nieDHDOsAwvpR8Z0NCbhU:wpxR6D7njcnniKAwvpR8Z0NCbhU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:69665:JFFAgoPIGgZohuQEKQJoqkDgSUlHACIIEg4El/Q6giIHQSIiFl1yAHL050AN+UiEGEi1ACokosiykCQnmTEMWFzJGxIMQBSR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffc3c183838183
Perceptual Hash:b9d2c71c066b932d
Difference Hash:2b200b0b3b3b233b
Wavelet Hash:ffffc3c181818183
Color Hash:#53ac77

Other Hashes

Crop Resistant:2b200b0b3b3b233b,2c246cb07541b8d8

Scan History

Scan history not available

Unable to load historical scan data