Security Report: ararchoir.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/21222bc0-619f-4217-ba30-be8f3be0d12e Domain and IP registration (RDAP)/api/v1/rdap/21222bc0-619f-4217-ba30-be8f3be0d12eHow often this domain was scanned/api/v1/domain/stats/ararchoir.com Scan history for this domain/api/v1/domain/history/ararchoir.com?limit=15

This website contacted 39 IPs in 3 countries across 21 domains to perform 150 HTTP transactions. The main domain is ararchoir.com and was registered 4 years 3 months ago.

Submitted URL: https://ararchoir.com

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Compromised choir site serving a ClickFix/EtherHiding Windows malware kit: fake Cloudflare 'Human Verification' overlay tells visitors to paste Terminal code; primary domain flagged as malware by multiple feeds.

Risk Factors (6)

Malicious ClickFix/EtherHiding malware kit injected into the page

Fake Cloudflare 'Human Verification' overlay impersonating Cloudflare security check

Instructions directing users to open Windows Terminal and paste attacker-supplied code (clipboard-paste infection)

Obfuscated JavaScript resolving stage-2 payload from a Polygon smart contract (EtherHiding)

Primary domain flagged as malware/clearfake by multiple threat feeds

Injected spam gambling links unrelated to a choir website (compromised WordPress)

Domain age information unavailable

Details

Page Title

Գլխավոր - ARAR CHOIRother network

Scan Type

public

Favicon Hash

MMH3: -995444158

MD5: 5fe6515e681b99510d2f6c977d051ee5

Domain Name Analysis

You're looking at domain 'ararchoir.com' on the commercial generic top-level domain (.com). The second-level label 'ararchoir' is 9 characters long containing 4 vowels alongside five consonants. Segmentation suggests 2 words: arar, choir. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.31s

Total Load Time

23.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:24%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:hy-AM

Text Length:3,046 chars

Detector Agreement:50%

Language mismatch: Declared as hy-AM but detected as en

Website Classification

Primary Category

entertainment media28% confidence

Type: spa

Method: ml+structural

All Detected Categories

entertainment media

28%

corporate

25%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
36	2.56.204.6	Armenia	AS216058Proitlab LLC
3	192.178.183.95Google · CDN	United States	AS15169Google LLC
3	142.251.20.97Google · CDN	United States	AS15169Google LLC
3	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
3	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
3	142.250.154.94Google · CDN	United States	AS15169Google LLC
3	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
3	142.251.156.4Google · CDN	United States	AS15169Google LLC
3	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
150	39	-	-