Security Scan Report: saintpatricksanglicanchurch.org

Site favicon
Submitted: Completed: publiccompleted
This website contacted 24 IPs in 4 countries across 23 domains to perform 75 HTTP transactions. The main domain is saintpatricksanglicanchurch.org and was registered 4 years 10 months ago.

Submitted URL: https://saintpatricksanglicanchurch.org

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Legitimate church domain that has been compromised: injected ClearFake/ClickFix EtherHiding loader delivers a fake 'Human Verification' ClickFix overlay and hidden casino SEO spam. Do not visit; report to the site owner.

Risk Factors (5)
Injected ClearFake/ClickFix blockchain loader (EtherHiding) serving a fake Cloudflare 'Human Verification' overlay to Windows visitors
Kit-roster confirmation of two critical phishing/malware families
15 CRITICAL IDS malware/exploit-kit alerts tied to the page's traffic
Obfuscated script hiding threat-feed RPC and loader hosts
Injected SEO spam (online casino / non-GamStop gambling text in English and Polish) indicating a compromised CMS
Domain age information unavailable

Details

Page Title

Saint Patrick's Anglican Church – Traditional Anglican Church of America

Scan Type

public

Domain Name Analysis

The domain name 'saintpatricksanglicanchurch.org' uses the non-profit oriented generic top-level domain (.org) without a subdomain. The registrable portion 'saintpatricksanglicanchurch' spans 27 characters with eight vowels and 19 consonants. Word splitting yields 4 words: saint, patricks, anglican, church. The median word length lands at 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://saintpatricksanglicanchurch.org

Page Load Overview

10.13s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:24,615 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog40% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
40%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6192.185.16.107Ashburn, Virginia, United States
AS31898Oracle Corporation
3172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
395.129.234.18Russia
AS57724Ddos-guard Ltd
3172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3193.32.220.134Frankfurt am Main, Hesse, Germany
AS48314IP-Projects GmbH & Co. KG
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
3104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7524--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D5242971B750253A21378BAEF1ABB31C6169C103E64E57E4F0FD82598BD6FA520B231D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:XvnAlnmjD2bA5+SuWuHfxqC8yp+kO+o163ir/0MxWRTkRC+XJ+zm+xic+vuDdBdb:XV24KwP/Kzm+xxdBxYGEa5e3/ACuMWb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:227594:QIBVEBg7jEIEI4AiwIIHAAkwKMFIMDpUgQGUoomSCRAAOgHDIFIHQACQgwFQC6CpxwIJODSdJQAIqyIy8hCEOE4BhIBFDgAC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3c3c7c3ffffffff
Perceptual Hash:b03066cfce988bcb
Difference Hash:061e161e00000008
Wavelet Hash:ffc3c3c30c0cff00
Color Hash:#d22d9b

Other Hashes

Crop Resistant:061e161e00000008

Scan History

Scan history not available

Unable to load historical scan data