Security Scan Report: educationpeer.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 4 countries across 5 domains to perform 47 HTTP transactions. The main domain is educationpeer.com and was registered 1 year 3 months ago.

Submitted URL: https://educationpeer.com

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Self-branded education site with no forms, but its primary domain is flagged as ClearFake malware by two independent threat feeds and its scripts contact blockchain testnet RPC nodes — consistent with a compromised/SEO-spam host.

Risk Factors (3)
Content-malware Indicator of Compromise (ClearFake malware family) on the primary domain, corroborated by two independent feeds
Unexplained blockchain testnet RPC connections from page scripts
SEO spam / unrelated gambling and entertainment posts on an education site
Domain age information unavailable

Details

Page Title

EducationPeer – Study Materials, Exams & Career Guidance

Scan Type

public

Domain Name Analysis

Domain 'educationpeer.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'educationpeer' spans 13 characters with 7 vowels and 6 consonants. Word splitting yields two words: education, peer. Median word length is 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://educationpeer.com

Page Load Overview

5.25s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,780 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning85% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

education learning
85%
technology software
61%
documentation technical
45%
government public service
37%
corporate
35%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1182.22.40.139Warsaw, Mazovia, Poland
AS49791Newserverlife LLC
3142.251.20.95Google · CDNUnited States
AS15169Google LLC
3104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
33.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
335.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
315.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
4713--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A2F35BB352DC3867236B879FA1C0B70CF5BB453FCA519AD4B1B9240D97E09E2025B35A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:S7zOqPPCThsvE+xHrVREgXSolenD//FCpSlukrcMj8n54ArpDqBoRu1:S7zO1hsvE+xLVhILYppkgMj8n5Ez

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:169910:ARgJIheIujKNMNDFRkAERXyMMgBEAYIJcADWpBBAiBeFA4KCn7EDZjgEEqjIhbiKNCTRcIoCB0MwkUZOAmEUHCOlo4mDCApg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc383bf83939381
Perceptual Hash:bcc3a29ed1863369
Difference Hash:08170e2632262613
Wavelet Hash:ffc3c38a819f8381
Color Hash:#40b0bf

Scan History

Scan history not available

Unable to load historical scan data