Security Scan Report: www.harlemheritage.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 3 countries across 6 domains to perform 71 HTTP transactions. The main domain is harlemheritage.com and was registered 26 years ago.

Submitted URL: https://www.harlemheritage.com/history-of-harlem/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Legitimate, long-established Harlem tours site whose pages have been compromised: scripts load the LandUpdate808 exploit-kit domain yelahaye.surf (CRITICAL IDS alerts) and inject casino spam. Do not interact.

Risk Factors (4)
Landing of LandUpdate808 exploit-kit domain via page script (DNS lookup and TLS SNI)
CRITICAL network IDS exploit-kit alerts tied to the page's network activity
Injected offshore-casino spam link inconsistent with page content (sign of compromise)
Unranked cross-origin script host contacted via XHR
Domain age information unavailable

Details

Page Title

History of Harlem | Harlem Heritage Tours & Cultural Center

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www.harlemheritage.com' is registered; it also runs on subdomain 'www'. The second-level label 'harlemheritage' is 14 characters long holding six vowels versus 8 consonants. Word splitting yields two words: harlem, heritage. The median word length lands at 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

History of Harlem Harlem is known internationally as the Black Mecca of the world, but Harlem has been home to many races and ethnic groups including the Dutch, Irish, German, Italian, and Jewish, Ha...

Page Load Overview

3.17s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:6,481 chars
Detector Agreement:100%

Website Classification

Primary Category

real estate property69% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

real estate property
69%
adult content
32%
travel tourism
29%
documentation technical
25%
news/blog
20%

Detected Features

Articles
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16104.196.182.216Google · CDNNorth Charleston, South Carolina, United States
AS396982Google LLC
1146.29.26.20Turkey
AS132359M/S ROBI TRADERS
11142.251.110.95Google · CDNUnited States
AS15169Google LLC
11146.75.120.157Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
11142.251.20.94Google · CDNUnited States
AS15169Google LLC
11172.66.0.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
716--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12524D9E79B753235339B965CB4CA72A4BADD8022E7401CB17CA456AC82C52C7237778F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:izZ0g4kQBnjlfWeB4pG1AmA4fAsgC3TC5n4QVDr+rf5l1rGX+7hn+Bx81Lv:hg4kQDWQ8rvIQVDr+rBZv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:229580:JVUZGiZsaAAEjl6QQANHMZEIQMeRSUECCQGYKkHGcYhEzEBEkYBI6MDQQCwiBBLDQgKqADRg1UuqIPxOmMICDDy8IKGSxmIi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00fff9f9f9fbfbf9
Perceptual Hash:e91616166963696f
Difference Hash:dd33331313133313
Wavelet Hash:0090f9c9f9e9d9c9
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data