Security Scan: Igambilo youth organization

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9c6aded9-a8ab-4711-9390-9950a0012dec Domain and IP registration (RDAP)/api/v1/rdap/9c6aded9-a8ab-4711-9390-9950a0012decHow often this domain was scanned/api/v1/domain/stats/igambiloyouth.or.tz Scan history for this domain/api/v1/domain/history/igambiloyouth.or.tz?limit=15

This website contacted 10 IPs in 3 countries across 8 domains to perform 132 HTTP transactions. The main domain is igambiloyouth.or.tz and was registered 2 months ago.

Submitted URL: https://igambiloyouth.or.tz

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Legitimate-looking Tanzanian NGO site whose pages are compromised with the ClearFake EtherHiding loader; obfuscated script hides iclickfix malware hosts. No forms phish visitors, but visiting risks malware infection.

Risk Factors (6)

Known malicious ClearFake kit injected into the page (analyst-vetted kit roster, CRITICAL)

EtherHiding: next-stage payload address resolved from a blockchain contract

Obfuscated inline script concealing malware delivery hosts (campaigntracker.icu, campaigntracker.run, 1rpc.io)

Threat-intel malware match on the primary domain ('unknown loader')

Page loads a third-party resource on trackerredirect.online flagged as iclickfix malware

Domain is only 75 days old and unranked, consistent with a recently compromised or repurposed host

Domain age information unavailable

Details

Page Title

Igambilo youth organization

Scan Type

public

Favicon Hash

MMH3: 1560324774

MD5: c85aa2ac2cb26dfc26460a5d03c6d074

Domain Name Analysis

The domain 'igambiloyouth.or.tz' uses the Tanzanian country-code top-level domain (.or.tz) while skipping any subdomain. The second-level label 'igambiloyouth' is 13 characters long with six vowels and seven consonants. Breaking it apart gives four words: i, gam, bilo, youth. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

10.69s

Total Load Time

5.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:2,353 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service74% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

74%

social media network

54%

blog personal website

49%

news media journalism

42%

education learning

39%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	50.6.195.188	Ashburn, Virginia, United States	AS31898Oracle Corporation
13	192.178.183.95Google · CDN	United States	AS15169Google LLC
13	172.217.117.4Google · CDN	United States	AS15169Google LLC
13	185.92.183.208	Riga, Riga, Latvia	AS56971Cgi Global Limited
13	142.251.110.94Google · CDN	United States	AS15169Google LLC
13	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
13	142.251.127.84Google · CDN	United States	AS15169Google LLC
13	13.33.52.208Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
13	172.217.114.4Google · CDN	United States	AS15169Google LLC
13	172.217.119.4Google · CDN	United States	AS15169Google LLC
132	10	-	-