Security Scan Report: drcourtneyjones.com

Submitted: Completed: publiccompleted
This website contacted 30 IPs in 3 countries across 16 domains to perform 77 HTTP transactions. The main domain is drcourtneyjones.com and was registered 9 years ago.

Submitted URL: https://drcourtneyjones.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Legitimate pediatrician site that appears compromised: ClearFake EtherHiding loader, CRITICAL malware IDS alert and injected ClearFake domains make it unsafe to browse — do not visit until cleaned.

Risk Factors (5)
ClearFake blockchain (EtherHiding) loader injected into the page — ClickFix malware chain
CRITICAL IDS alert for EtherHiding exfiltration traffic
Multiple corroborated malicious third-party script/asset hosts embedded in the page
Injected gambling spam content and unrelated script fetch to unranked host hw9kfw8lk.com via fetch()
Malware 'loader' threat-intel tag against the primary domain (single-source, unverified)
Domain age information unavailable

Details

Page Title

Courtney Jones, D.O., F.A.A.P. – Board Certified Pediatrician

Scan Type

public

Domain Name Analysis

Domain 'drcourtneyjones.com' uses the commercial generic top-level domain (.com) without a subdomain. The second-level label 'drcourtneyjones' is 15 characters long containing 5 vowels alongside 10 consonants. Word splitting yields 3 words: dr, courtney, jones. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://drcourtneyjones.com

Page Load Overview

3.37s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:23,188 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical77% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
77%
gambling betting
63%
finance banking
33%
cryptocurrency blockchain
25%
forum
25%

Detected Features

Search
Articles
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19160.153.0.86Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
213.226.244.116Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2142.251.14.102Google · CDNUnited States
AS15169Google LLC
252.92.147.224Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
2142.251.154.119Google · CDNUnited States
AS15169Google LLC
2104.21.57.81Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23.161.82.21Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
213.226.244.9Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2192.178.183.101Google · CDNUnited States
AS15169Google LLC
7730--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T166B3193390922257379F6398B692B34CE8361545E7820BD9F2FDC1A0BB88DB9193774D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:epB4rapC1jspHAh9q1XLQP52EnjJ7uU5BGdy/:R1j2A5VT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:108846:IgHZK0fAjBCCKLHoUYkFCAFgZP0CYiYA2iEAJmK0kgz5I5lFYRUePnBAJTM5EBHgUACSlJooQEEIsnYMgRkhFAFA0aMCC5IC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfffc3c3ffe7c7c3
Perceptual Hash:e59b649b64336499
Difference Hash:32200e0e1c1c1e06
Wavelet Hash:80bfc3c3c7c3c3c2
Color Hash:07601000000

Other Hashes

Crop Resistant:32200e0e1c1c1e06

Scan History

Scan history not available

Unable to load historical scan data