Security Scan Report: indigenoushomeloans.com

Redirected to:
https://www.indigenoushomeloans.com/
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 3 countries across 6 domains to perform 116 HTTP transactions. The main domain is indigenoushomeloans.com and was registered 8 years ago.

Submitted URL: https://indigenoushomeloans.com

Effective URL:
https://www.indigenoushomeloans.com/
Redirected

AI Security Verdict

High Risk

Confidence: 93%

7
Risk Score

Compromised home-loans site serving the ClearFake EtherHiding loader plus injected casino SEO spam; no forms, but the page hosts known malware infrastructure. Avoid.

Risk Factors (6)
Analyst-vetted ClearFake ClickFix loader injected into the page
EtherHiding / blockchain-contract C2 resolution
Obfuscated JavaScript hiding RPC endpoints used by the loader
Single-source malware 'unknown loader' indicators on the primary domain
Compromised-site SEO spam injection (casino/gambling content unrelated to the host business)
Existing 3 informational IDS alerts for likely JavaScript-obfuscator usage consistent with the injected loader
Domain age information unavailable

Details

Page Title

Indigenous Home Loans | Free Consultation

Scan Type

public

Domain Name Analysis

You're looking at domain 'indigenoushomeloans.com' on the commercial generic top-level domain (.com) while skipping any subdomain. Count 19 characters in 'indigenoushomeloans' with nine vowels and ten consonants. Segmentation suggests 3 words: indigenous, home, loans. Median word length comes out to five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://indigenoushomeloans.com

Page Load Overview

10.46s
Total Load Time
1.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,127 chars
Detector Agreement:50%

Website Classification

Primary Category

gambling betting50% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
50%
technology software
43%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
24203.170.87.177Australia
AS38719Dreamscape Networks Limited
23192.178.183.95Google · CDNUnited States
AS15169Google LLC
23157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
23142.251.14.94Google · CDNUnited States
AS15169Google LLC
23157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
1165--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B4B33C350F545427728787D8F232F9D8DD9B7036EA4184AFF1BC3428A78A97685E3938

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:LeIqsVRJLwW3QQcx/OnQYLymLMCXTeQ8greYGdKyBhCyiVOjpCHf2xC5Kapd/tFI:Lbcx/OQYLymLMCXTeW6LgUb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:117116:gHwlgchhuQyJNgJAQQJQAADsiCIPJENBkBGIDgihiIqAaCVhYgLkhLjcHLIhCiBS0xgIAhkJSAjpAhKRYnIJEkgAjBAGoAFE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffff0000
Perceptual Hash:be7e424b6b60e00f
Difference Hash:4160261769001010
Wavelet Hash:009fff83bfff0000
Color Hash:#78533a

Scan History

Scan history not available

Unable to load historical scan data