Security Scan Report: al-fusha.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 1 country across 4 domains to perform 134 HTTP transactions. The main domain is al-fusha.com and was registered 3 years 5 months ago.

Submitted URL: https://al-fusha.com

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Legitimate-looking Arabic learning site, but its domain matches the ClearFake malware family (2 feeds) and page scripts contact BSC testnet RPC nodes — the site appears compromised and should not be trusted.

Risk Factors (4)
Threat-intel match on the primary domain for the ClearFake malware family (2 corroborating feeds)
Unexplained cross-origin fetches to Binance Smart Chain testnet RPC nodes, consistent with blockchain-based malware C2
WordPress/Contact Form 7 site structure compatible with ClearFake injection
eval() present in page JavaScript
Domain age information unavailable

Details

Page Title

Al-Fusha – Learn Arabic the Easy Way with Al Fusha

Scan Type

public

Domain Name Analysis

Domain 'al-fusha.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'al-fusha' spans 8 characters split between 3 vowels and four consonants; bonus characters include one hyphen. Splitting it apart reveals 3 words: al, fu, sha. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

we letal stip ALFUSHA AUTHENTICITY, AND) CULTURAL HERITAGE: HOME COURSES MARKAZON-SITE ABOUT US ‘ACADEMIC GROWTH AND, PERSONAL ENRICHMENT FAQS CONTACTUS LOGIN/REGISTER ‘ACCESS TO CLASSICAL’ ‘A...

Page Load Overview

7.63s
Total Load Time
2.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:4,456 chars
Detector Agreement:75%

Website Classification

Primary Category

education learning56% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
56%
adult content
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1463.250.43.139United States
AS22612Namecheap, Inc.
12142.251.20.95Google · CDNUnited States
AS15169Google LLC
1215.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
12172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
1235.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1215.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
12192.0.73.2San Francisco, California, United States
AS2635Automattic, Inc
12142.251.14.94Google · CDNUnited States
AS15169Google LLC
13411--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F3841A623D271829312FA15FC00B339C7299ADEAE53676D1F5F51027B6F2CA433E1626

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:C1zZUGZT6GIKHudaEu//ppHUJE8Q+e0vanwnDjh1WD:C5WjJI8E8QH01WD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:372397:UFgMAA4lghQAMxANRQpAC+RVopCRgiaUCBIaAVJHKCAIEmKtOvgAIZADISVWgej1TzigFJJQgqAwTIKYQRYIFSRgDKocAAbI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bfffffffff81ff00
Perceptual Hash:bd97163d96862d82
Difference Hash:6a2000002b2b238e
Wavelet Hash:a0fefefefe800000
Color Hash:N/A

Other Hashes

Crop Resistant:6a2000002b2b238e

Scan History

Scan history not available

Unable to load historical scan data