Security Scan Report: abundantearthfoundation.org

Site favicon
Submitted: Sep 13, 2026, 8:47:28 PMCompleted: Sep 13, 2026, 8:49:37 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Established nonprofit site appears compromised: critical EtherHiding malware IDS alerts plus blockchain RPC calls and a malware-typed IoC on the primary domain. Avoid interacting until cleared.

Risk Factors
CRITICAL IDS alerts for EtherHiding malware exfiltration (min HIGH_RISK per ET MALWARE rule)
Malware-typed threat-intel match on the scanned primary domain
Scripts contacting blockchain RPC/smart-chain endpoints (EtherHiding delivery pattern)
External resource with corroborated malware reputation loaded by the page
Domain age information unavailable

Details

Page Title

Abundant Earth Foundation – Restoring ecosystems for an Abundant Earth.

Scan Type

public

Domain Name Analysis

Within the non-profit oriented generic top-level domain (.org), 'abundantearthfoundation.org' is registered while skipping any subdomain. Count 23 characters in 'abundantearthfoundation' with ten vowels and 13 consonants. Word splitting yields 3 words: abundant, earth, foundation. Median word length is 8 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://abundantearthfoundation.org

Page Load Overview

90.29s
Total Load Time
2.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:57,644 chars
Detector Agreement:75%

Website Classification

Primary Category

news/blog40% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
40%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22104.21.54.181Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9172.67.73.138Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
945.60.14.94Incapsula · WAFUnited States
AS19551Incapsula Inc
954.231.202.32Aws · CLOUDAshburn, Virginia, United States
AS16509Amazon.com, Inc.
965.8.131.121Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
9142.251.110.97Google · CDNUnited States
AS15169Google LLC
9192.178.183.95Google · CDNUnited States
AS15169Google LLC
9172.67.71.68Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9192.178.183.94Google · CDNUnited States
AS15169Google LLC
9142.251.156.4Google · CDNUnited States
AS15169Google LLC
26528--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D2432C76D022844CF8F7CB22269136186014A626DE51F79EFEBB637C46AD07703A771B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:u9i5Q62I/xE6x4g5bn/1nW0R7csctc+cocxc+cBcecPclcQcmcUcHcVcVcHckcek:8iCknVYyvdkyppX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:55736:AOTCsQMA9cUOmEEgACFkNUWwIQAgKQ0MAwTBmUoQQHCQBFhG7AAShrqAHiAfAADST+DKGFgrIgTIhmMDAe6BDTSDIjACgUKI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:9f1e1e3e3e2e0a42
Difference Hash:2200410302080000
Wavelet Hash:0000bc80fee6fefe
Color Hash:#d2772d

Other Hashes

Crop Resistant:2200410302080000

Scan History

Scan history not available

Unable to load historical scan data