Security Scan Report: ibrahimlutfifoundation.org

Site favicon
Submitted: Sep 15, 2026, 12:47:28 PMCompleted: Sep 15, 2026, 12:48:20 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 63%

7
Risk Score

Single-source (unverified) threat-intel flags this primary domain as ClickFix malware; content is an empty placeholder on an aged self-branded domain. Escalated per content-malware rule but confidence limited by lack of corroboration.

Risk Factors (3)
Content-malware threat-intelligence match on the primary domain (ClickFix-style 'iclickfix' malware), single-source and unverified
Empty/near-empty content on an aged registered domain — possible placeholder or staging infrastructure
Crypto RPC infrastructure loaded on a 'foundation' page
Domain age information unavailable

Details

Page Title

Ibrahim Lutfi Foundation

Scan Type

public

Domain Name Analysis

The domain 'ibrahimlutfifoundation.org' uses the non-profit oriented generic top-level domain (.org) with no subdomain. Its registrable label 'ibrahimlutfifoundation' stretches across 22 characters with 10 vowels and 12 consonants. Splitting it apart reveals five words: ibrahim, l, utf, i, foundation. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ibrahimlutfifoundation.org

Page Load Overview

30.63s
Total Load Time
431 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:82 chars
Detector Agreement:50%

Website Classification

Primary Category

government public service60% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
60%
healthcare medical
48%
adult content
43%
news media journalism
42%
finance banking
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3209.126.25.211United States
AS36444Liquid Web, L.L.C
2104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
279.127.216.203Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
2172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
157--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A00364A36388033EA68D4EEDD2547127A1F1E11BBC342359B7E756EFB839CA11036635

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:Wm9mrjooZ0WDXy0a3PbZdypJLiW1GLtQVq2zwsSmyrT+yw/r:Ir0oZPX8rypVfGLtQVq2zwsSQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:40589:BRCYEZRVGBrG8QgACAIVPBJCIAIEYcHARPAUV0GhQDBKGUkgAy9ABGIKDggVgAJFIJOGAoxAEWqhIjMgoRA0jNITEFijLjgl

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:83030307071f7f7f
Difference Hash:d000000000000000
Wavelet Hash:00fff0f0f0f0f0f0
Color Hash:#40bf6e

Other Hashes

Crop Resistant:d000000000000000

Scan History

Scan history not available

Unable to load historical scan data