Security Scan Report: onlineshiaqurancenter.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 7 domains to perform 132 HTTP transactions. The main domain is onlineshiaqurancenter.com and was registered 3 years 11 months ago.

Submitted URL: https://onlineshiaqurancenter.com

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Confirmed ClickFix fake human-verification overlay, critical YARA/IDS malware and primary-domain malware IoC; do not interact.

Risk Factors (6)
Known malicious ClickFix Windows overlay kit identified (fake human verification, Win+X/Terminal execution).
Critical YARA rule ClickFix_WinX_Overlay_Kit matched.
Primary domain reported as clearfake malware by 2 independent feeds.
Critical IDS alerts for EtherHiding Exfil M2.
Cross-origin connections to blockchain RPC nodes and malicious third-party domain checkyoubrowse.codes.
Fake reCAPTCHA/Ray ID overlay visible to users.
Domain age information unavailable

Details

Page Title

Online Shia Quran Center & Shia Quran Academy | Free Trial Classesother network

Scan Type

public

Domain Name Analysis

Domain 'onlineshiaqurancenter.com' uses the commercial generic top-level domain (.com) without a subdomain. Count 21 characters in 'onlineshiaqurancenter' containing 9 vowels alongside twelve consonants. Word splitting yields four words: online, shia, quran, center. The median word length lands at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://onlineshiaqurancenter.com

Page Load Overview

8.76s
Total Load Time
3.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:17,226 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning44% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
44%
news/blog
35%
corporate
35%
adult content
33%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1550.6.156.28Ashburn, Virginia, United States
AS31898Oracle Corporation
13142.251.14.95Google · CDNUnited States
AS15169Google LLC
13132.145.155.63Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
13104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13142.251.110.94Google · CDNUnited States
AS15169Google LLC
13178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
13104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13142.251.14.94Google · CDNUnited States
AS15169Google LLC
13104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13210--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D494C89F577A3A75320343D4F881B33892ECC523DA995CE1BDBA8198CBC34A111B656F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:Ogj4kDLM/OLuXW1yGAA1yiZrb0wMUmhjoRNCkuvuJEKBTTVoWM:/j4kDM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:429166:qKvA4ACBKEKbLgIjmVRIICgDEQOcgZQSiokAQCgRCQZDAwE9QjSDIqQBIFMrYgMukAIgsYIQMUFXg8GBADOEJFyAwAK5BASQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:feff0000000000ff
Perceptual Hash:a45df554d4175117
Difference Hash:002080a424828c00
Wavelet Hash:ffff00001000f7ff
Color Hash:#99ac53

Other Hashes

Crop Resistant:002080a424828c00

Scan History

Scan history not available

Unable to load historical scan data