Security Report: explain-it-simple.net - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1ae0fb76-22e7-4334-8b99-a04bb519738e Domain and IP registration (RDAP)/api/v1/rdap/1ae0fb76-22e7-4334-8b99-a04bb519738e Certificate Transparency/api/v1/ct/explain-it-simple.net How often this domain was scanned/api/v1/domain/stats/explain-it-simple.net Scan history for this domain/api/v1/domain/history/explain-it-simple.net?limit=15

This website contacted 46 IPs in 4 countries across 22 domains to perform 109 HTTP transactions. The main domain is explain-it-simple.net and was registered 2 days ago.

Submitted URL: https://explain-it-simple.net

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate German explainer-video site whose pages have been compromised and injected with ClearFake/ClickFix loaders (AMOS stealer), confirmed by two threat feeds, four YARA kit hits and a CRITICAL IDS alert — do not visit.

Risk Factors (5)

Content-malware indicator on the primary domain, corroborated by two independent threat feeds

Multiple CRITICAL/HIGH YARA matches for ClearFake (Polygon EtherHiding loader) and Macfinger ClickFix AMOS-stealer kits injected into the page

CRITICAL IDS alert for AMOS ClickFix loader script request — live payload delivery observed

Injected clickfix/stealer loader tag (t.js?site=<32 hex>) and rival-kit cleanup script indicate a compromised site actively serving a ClickFix TDS

Injected off-site gambling spam link and an unranked third-party script host contacted via sendBeacon — signs of tampering

Domain age information unavailable

Details

Page Title

explain it simple – Komplexes einfach erklärt

Scan Type

public

Favicon Hash

MMH3: -82975277

MD5: 31f09bdfcd1ce8118494f8bbd2ebd3a2

Domain Name Analysis

Domain 'explain-it-simple.net' uses the network infrastructure generic top-level domain (.net) while skipping any subdomain. The second-level label 'explain-it-simple' is 17 characters long split between six vowels and 9 consonants; it also includes two hyphens. It segments into 3 words: explain, it, simple. Median word length comes out to six characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.95s

Total Load Time

4.9 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:41%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-GB

Text Length:14,280 chars

Detector Agreement:75%

Language mismatch: Declared as en-GB but detected as de

Website Classification

Primary Category

gambling betting67% confidence

Type: spa

Method: ml+structural

All Detected Categories

gambling betting

67%

education learning

62%

entertainment media

51%

government public service

47%

corporate business

43%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
19	92.205.199.103	Germany	AS60253Host Europe GmbH
2	142.251.14.95Google · CDN	United States	AS15169Google LLC
2	2.56.176.207	Cyprus	AS61098Akenes SA
2	89.145.160.109	Frankfurt am Main, Hesse, Germany	AS61098Akenes SA
2	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
2	142.251.110.97Google · CDN	United States	AS15169Google LLC
2	142.251.152.4Google · CDN	United States	AS15169Google LLC
2	172.67.75.123Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	3.171.214.99Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
2	142.251.110.94Google · CDN	United States	AS15169Google LLC
109	46	-	-