Security Scan Report: alssada.org

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 4 domains to perform 11 HTTP transactions. The main domain is alssada.org and was registered 2 years 7 months ago.

Submitted URL: https://alssada.org

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Compromised WordPress site serving ErrTraffic/Exvicy and ClearFake/ClickFix loaders with EtherHiding blockchain-based payload retrieval; do not visit, it attempts to infect visitors.

Risk Factors (7)
Analyst-vetted malicious kit: ErrTraffic/Exvicy injected loader (CRITICAL phishing) matched in page HTML
Analyst-vetted malicious kit: ClearFake/ClickFix bscSl fake WordPress plugin loader (CRITICAL phishing) matched in page HTML
EtherHiding: next-stage payload address read from a blockchain smart contract
CRITICAL IDS alerts for EtherHiding exfiltration and Ethereum contract lookups
Primary domain alssada.org flagged as iclickfix malware in threat intelligence
Deobfuscation reveals threat-feed host cloudflare-check.net (ek clearfake) plus 1rpc.io and gateway.tenderly.co hidden in script
Compromised-WordPress abuse: injected loaders combined with unrelated multi-language gambling SEO spam posts
Domain age information unavailable

Details

Page Title

AlSadda – Your Technology key!

Scan Type

public

Domain Name Analysis

The domain name 'alssada.org' uses the non-profit oriented generic top-level domain (.org) and has no subdomain. Its registrable label 'alssada' stretches across 7 characters containing three vowels alongside four consonants. Word splitting yields two words: als, sada. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://alssada.org

Page Load Overview

2.43s
Total Load Time
39 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:7,465 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical54% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
54%
entertainment media
53%
technology software
53%
social media network
49%
blog personal website
47%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
550.6.160.127Ashburn, Virginia, United States
AS31898Oracle Corporation
264.130.32.46Frankfurt am Main, Hesse, Germany
AS20326TeraSwitch Networks Inc.
2104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2208.115.201.238Frankfurt am Main, Hesse, Germany
AS46475Limestone Networks, Inc.
114--

Detected Technologies5

WordPressv7.1.4
100%
50%
Nginxv1.29.8
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12E53C735619C0876570772CF8190BE1CECFF8D75DB639A52B2FB90989B82CB7413521A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:3jW+YypbkBKJtaOe9KR+JKGsfonlKugLEdNijFDNVBGRqSmFX1:P5Hgseguf27BGISmB1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:60852:M2goUQNAaIFEkRDKCJMAQMFqOGQgMgMgsDaSDQMgNDSniKlIoGBqiIGDUwAaHA0gUyUyCEy6q3TAUKIGAlADgSKjfcJkwYDj

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3efeffffffffffff
Perceptual Hash:97070707070f0fbf
Difference Hash:c000000000000000
Wavelet Hash:3efefefe02020202
Color Hash:07000000000

Other Hashes

Crop Resistant:c000000000000000

Scan History

Scan history not available

Unable to load historical scan data