Security Scan Report: www.axis-news.com

Site favicon
Submitted: Sep 18, 2026, 9:47:27 AMCompleted: Sep 18, 2026, 9:47:58 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Established Arabic news site apparently compromised — critical IDS alerts show EtherHiding exfiltration and ClickFix command-and-control with blockchain RPC and eval() usage, plus a malware IoC naming the domain. Avoid.

Risk Factors
Critical IDS malware/C2 alerts (EtherHiding exfiltration, ClickFix command-and-control POST)
Live connection to Binance Smart Chain RPC endpoint used for blockchain-hosted payloads
Single-source threat-intel flag naming the domain as ClickFix/iClickFix malware
Dynamic code execution via eval() consistent with a compromised-page injection
Media site whose legitimate news content masks injected malicious script — likely compromised rather than malicious by design
Domain age information unavailable

Details

Page Title

المحور الإخباري -

Scan Type

public

Domain Name Analysis

Domain 'www.axis-news.com' uses the commercial generic top-level domain (.com) and includes subdomain 'www'. Its registrable label 'axis-news' stretches across 9 characters split between three vowels and five consonants, along with 1 hyphen. Breaking it apart gives 2 words: axis, news. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.axis-news.com

Page Load Overview

6.16s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇸🇦Arabic
Code: ar
Confidence:80%
Script:Arabic
Direction:rtl

Detection Details

HTML Lang Attribute:ar
Text Length:5,097 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism88% confidence
Type: spa
Method: ml+structural

All Detected Categories

news media journalism
88%
adult content
65%
government public service
58%
forum community discussion
39%
education learning
39%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1285.13.136.35Germany
AS34788Neue Medien Muennich GmbH
974.125.29.95Google · CDNUnited States
AS15169Google LLC
9142.251.127.156Google · CDNUnited States
AS15169Google LLC
9172.217.208.95Google · CDNUnited States
AS15169Google LLC
9142.251.127.155Google · CDNUnited States
AS15169Google LLC
9157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
9142.251.127.157Google · CDNUnited States
AS15169Google LLC
9142.251.110.94Google · CDNUnited States
AS15169Google LLC
9142.251.127.154Google · CDNUnited States
AS15169Google LLC
9157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
12013--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T184F1E9772D4B9C0D57B104A2B0FFF68D602A128200C2ADB9F79ED9752726ED590F251B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:EkL6iL4aJhoxFpJhrrra4goclFPUaECV8Yms0ftkFfiZtk3:EkLDzoxFpJNra4gJIZo89s01kdv3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7620:MuMgEMABYjCYELHABCCBiQhIUye2EoiIEFawtEggSnIIoSBgAA7RqQKBWAAIUQgwjRIgkAwp0WSGASCIEcBhMSBioS0AAlmR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:d2525252525b5b7b
Difference Hash:4000000000000000
Wavelet Hash:007f0f0f0f0f0f0f
Color Hash:#d279b2

Other Hashes

Crop Resistant:4000000000000000

Scan History

Scan history not available

Unable to load historical scan data