ScanMalware.com

Security Scan Report: congojustice.org

Submitted: Oct 12, 2026, 4:20:27 PMCompleted: Oct 12, 2026, 4:21:05 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Established documentary site has been compromised: analyst-vetted DarkSword iOS exploit kit (Coruna wallet stealer) plus YARA and CRITICAL IDS exploit-kit hits, with scripts loaded from malware-flagged domains. Do not visit.

Risk Factors (5)
Known malicious exploit kit (DarkSword iOS / Coruna wallet stealer) matched twice by analyst-vetted kit roster
YARA malware pattern match on the page HTML body
Three CRITICAL exploit-kit IDS alerts fired against this page
Page loads third-party scripts from domains flagged as malware (apiforxwork.com/.net, translatevv.com)
Injected off-topic SEO spam links ('Latest inflation report', 'Financial apps for families') on an unrelated documentary WordPress site, consistent with a compromised CMS serving malicious code
Domain age information unavailable

Details

Page Title

Crisis In The Congo: Uncovering The Truth – A short documentary looking at the situation in Central Africa

Scan Type

public

Domain Name Analysis

The domain name 'congojustice.org' uses the non-profit oriented generic top-level domain (.org) with no subdomain. The registrable portion 'congojustice' spans 12 characters split between 5 vowels and 7 consonants. Tokenizing the label suggests two words: congo, justice. Median word length is 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://congojustice.org/

Page Load Overview

4.49s
Total Load Time
908 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,746 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service74% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
74%
adult content
59%
download file sharing
57%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6107.180.235.28Ashburn, Virginia, United States
AS26347New Dream Network, LLC
5192.0.73.2San Francisco, California, United States
AS2635Automattic, Inc
5172.67.187.123Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.21.32.211Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.16.184.241Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.16.185.241Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
418--

Detected Technologies8

WordPressv7.0.2
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
WordPress Site Editor
30%
WordPress Block Editor
30%
Gravatar
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16FB3D86157B848F5797F836B9E48A318A127E902CA0537D4F0FBD15467CCEA50AE3B0B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:ZAcmRiBmgT0cTrnbO27kW/euVwvQi+ZobwemlUVugamJHEWoddqbEZGDk7bn5bbg:ucmoTkW2kZobwemlUVugamJHEWAdqN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:108836:KErGICyTQFkYmOCRDEhgABYSEDS4IHVK0AgCCgGEXQAkAIWAAv5hCUwMDDigAwhAiBCUlixBFNAQDCF5htDysCDQDQuAkQDt

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:93ffefc3d3c383f3
Perceptual Hash:bdd64e3c4c38c62c
Difference Hash:22c80a3636163236
Wavelet Hash:90eef68282c383fb
Color Hash:#6fd22d

Other Hashes

Crop Resistant:22c80a3636163236

Scan History

Scan history not available

Unable to load historical scan data