Security Scan Report: bahid.org

Site favicon
Submitted: Oct 12, 2026, 4:16:16 PMCompleted: Oct 12, 2026, 4:17:06 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Legitimate 25-year-old BAHID site appears compromised: analyst-vetted ClickFix/EtherHiding and DarkSword iOS exploit-kit code is injected and served, with multiple CRITICAL IDS alerts. Do not visit; content is real but the page delivers malware.

Risk Factors (5)
Analyst-vetted ClickFix/EtherHiding loader injected into the page
Analyst-vetted DarkSword iOS exploit kit / wallet-stealer captcha gate
Multiple CRITICAL IDS malware and exploit-kit alerts
Page loads third-party domains flagged as malware by multiple threat-intel feeds
Numerous external resources (zvh4.com, apiforxwork.com/.net, translatevv.com) unrelated to the site's stated purpose
Domain age information unavailable

Details

Page Title

British Association for Human Identification - BAHID

Scan Type

public

Domain Name Analysis

The domain name 'bahid.org' uses the non-profit oriented generic top-level domain (.org) without a subdomain. Its registrable label 'bahid' stretches across 5 characters split between two vowels and 3 consonants. Breaking it apart gives 2 words: bahi, d. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bahid.org/

Page Load Overview

9.61s
Total Load Time
900 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,290 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network84% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
84%
government public service
61%
corporate
35%
adult content
34%
education learning
30%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1552.56.213.172Aws · CLOUDCity of London, England, United Kingdom
AS16509Amazon.com, Inc.
8104.21.32.211Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8146.19.24.104Poland
AS201814MEVSPACE sp. z o.o.
8172.67.187.123Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8104.16.184.241Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8104.16.185.241Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
718--

Detected Technologies8

WordPressv7.1.3
100%
JQueryv3.7.1
100%
50%
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T171C3B6727A8A2C35326F42CFD017660C61CBEFE6D651A9E5F0F71271A1B5CB032D22A5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:pRdGal2FJd9d1gd2dsd4dBdzd5dGdFg33bb12FbGuyeY:pRd27

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:128460:AgQgo5ImdoTMDUYpAgaADXBiACNQgIiKCclsIAIGqmuRG/EpETUBNCxhnIhIwE8IKUpHqQcyLQQQIkahTUwInQkIUEQMKFHp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9f000000f3f3f3ff
Perceptual Hash:ec1292ec9a1c9eec
Difference Hash:2961692327272768
Wavelet Hash:9f000000f3f3f3ff
Color Hash:#77862d

Scan History

Scan history not available

Unable to load historical scan data