ScanMalware.com

Security Scan Report: newsstarlinkhindi.com

Submitted: Completed: publiccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

ClickFix malware page: fake Cloudflare 'verification' tells Windows users to paste a command into PowerShell. High-precision YARA kit hit, multi-feed malware IoC on the domain, and 19 CRITICAL trojan-exfiltration IDS alerts.

Risk Factors (5)
Fake Cloudflare bot-verification overlay impersonating Cloudflare (Ray ID cosmetic detail)
ClickFix social engineering instructing users to paste attacker text into Windows PowerShell/Terminal
Multi-source threat-intelligence malware attribution to the primary domain (iclickfix)
19 CRITICAL IDS malware/trojan exfiltration alerts (ET MALWARE EtherHiding Exfil M2)
Deceptive branding mismatch (title 'yuvanras.online' vs scanned domain) and adult-content lure with outbound affiliate redirect
Domain age information unavailable

Details

Page Title

yuvanras.online

Scan Type

public

Domain Name Analysis

The domain 'newsstarlinkhindi.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The core label 'newsstarlinkhindi' covers 17 characters containing five vowels alongside twelve consonants. Tokenizing the label suggests 4 words: news, star, link, hindi. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://newsstarlinkhindi.com

Page Load Overview

4.83s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,781 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.13.95Google · CDNUnited States
AS15169Google LLC
7104.16.56.10Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.14.94Google · CDNUnited States
AS15169Google LLC
7188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.110.95Google · CDNUnited States
AS15169Google LLC
7142.251.110.94Google · CDNUnited States
AS15169Google LLC
715.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
734.111.175.102Google · CDNKansas City, Missouri, United States
AS396982Google LLC
7104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8411--

Detected Technologies8

WordPressv7.0.7
100%
MetaGenerator
100%
JQueryv3.7.1
100%
Cloudflare Bot Management
55%
PHP
50%
MySQL
50%
HTTP/3
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F88308317A9A297A262F43CFC113760C609AEDFAD590A5F5F1B71120A1F1CF231D2A65

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:yByp/ybFvB0FJLceBrREm/kkrBnVhWAi3H9aliqojozQGIxxjsVRMdZ:y8xybZOhBrREm/kkrBnVhWA0H9alEozy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:83401:BkkJIoKgQCEROSUBhB3GCAQEkIC7IAFBIOBsCFgAB6CUFhQJACLwqwhUyjpAKCs0CgAKIM0uhwiSEkQYQYFHMHBKAgwbhABI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000000ffffffff
Perceptual Hash:9313ecece412e0ed
Difference Hash:d5c9d9dd3a13332a
Wavelet Hash:00000000ffffffff
Color Hash:#5e40bf

Other Hashes

Crop Resistant:d5c9d9dd3a13332a,d5d549c9d9d8dcd8,018d1133b3310011

Scan History

Scan history not available

Unable to load historical scan data