Security Scan Report: carolynhannaford.com

Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 6 domains to perform 88 HTTP transactions. The main domain is carolynhannaford.com and was registered 2 years ago.

Submitted URL: https://carolynhannaford.com

AI Security Verdict

High Risk

Confidence: 92%

7
Risk Score

Compromised WordPress author site injecting the analyst-vetted ClearFake kit: obfuscated script pulls a next-stage payload address from a Polygon contract (EtherHiding) via concealed RPC hosts. No forms phish credentials, but visitors face malware risk.

Risk Factors (4)
Known malicious ClearFake phishing/malware kit injected into the page
EtherHiding: next-stage payload address fetched from a blockchain contract
Obfuscated JavaScript hiding command-and-control/RPC hosts
Compromised WordPress installation serving malicious scripts to visitors
Domain age information unavailable

Details

Page Title

Carolyn A Hannaford

Scan Type

public

Domain Name Analysis

You're looking at domain 'carolynhannaford.com' on the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'carolynhannaford' is 16 characters long holding five vowels versus 11 consonants. Tokenizing the label suggests three words: carolyn, hanna, ford. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Logo. Home About The Author Carolyn Hannaford Carolyn Hannaford, the fourth of ten children, was born in Grosse Pointe, Michigan. Growing up in a military family, she traveled and lived in many pl...

Page Load Overview

4.98s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:5,064 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning91% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
91%
entertainment media
76%
travel tourism
35%
government public service
30%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1179.142.67.235Netherlands
AS51430AltusHost B.V.
11142.251.14.95Google · CDNUnited States
AS15169Google LLC
11142.251.110.97Google · CDNUnited States
AS15169Google LLC
11104.21.66.243Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11142.251.14.94Google · CDNUnited States
AS15169Google LLC
11216.239.32.36Google · CDNUnited States
AS15169Google LLC
11172.67.210.2Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11216.239.34.36Google · CDNUnited States
AS15169Google LLC
888--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T163B3D7613D861C36220F16DFA117365E90CAEEF4EA92A5F6F0B7602891B4CB033E7575

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:0eNdC8mlYSNQHd4z43ubS+JI+KLyPsGutXps7:12OSN7L

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:117034:qevFgEYUhAesKNszCADwmrYZRNCDTMIaYBWMAwidDkJoREgI2wFNUCGEwQkVaAGAHOEMQCRdgVVXgxGMCAgOWBKyRRAA5aBs

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9efffe9e9efe8e86
Perceptual Hash:9cce38cc3e1cc33c
Difference Hash:2a00002030003838
Wavelet Hash:88ee3e1e02628e86
Color Hash:N/A

Other Hashes

Crop Resistant:2a00002030003838

Scan History

Scan history not available

Unable to load historical scan data