Security Report: aortraining.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/362c8c85-077b-4dfc-91c0-8d4dbb3a148a Domain and IP registration (RDAP)/api/v1/rdap/362c8c85-077b-4dfc-91c0-8d4dbb3a148aHow often this domain was scanned/api/v1/domain/stats/aortraining.com Scan history for this domain/api/v1/domain/history/aortraining.com?limit=15

This website contacted 38 IPs in 3 countries across 25 domains to perform 173 HTTP transactions. The main domain is aortraining.com and was registered 3 years ago.

Submitted URL: https://aortraining.com

AI Security Verdict

High Risk

Confidence: 92%

Risk Score

Legitimate-looking AZ CCW training site apparently compromised with a ClearFake/EtherHiding loader: critical kit-roster and IDS malware hits, blockchain RPC traffic and flagged third-party resources. Avoid visiting; do not click through.

Risk Factors (5)

ClearFake/EtherHiding malware kit injected into the page (analyst-vetted kit roster, CRITICAL)

IDS CRITICAL malware alert for EtherHiding exfiltration and blockchain RPC contact to polygon.drpc.org

Page loads multiple threat-intel-flagged third-party domains (ek clearfake, ta569, socgholish, fakeapp)

Google Safe Browsing: Unwanted Software

Cross-origin POST from inline script to a malware-associated domain

Domain age information unavailable

Details

Page Title

AOR Training – Get Certified Today!

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'aortraining.com' is registered without a subdomain. The second-level label 'aortraining' is 11 characters long split between 5 vowels and 6 consonants. Splitting it apart reveals three words: a, or, training. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

75.39s

Total Load Time

7.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:34,201 chars

Detector Agreement:100%

Website Classification

Primary Category

education learning86% confidence

Type: spa

Method: ml+structural

All Detected Categories

education learning

86%

government public service

81%

documentation technical

66%

adult content

65%

phishing scam

48%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
25	141.193.213.10Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
4	142.251.14.95Google · CDN	United States	AS15169Google LLC
4	178.162.202.96	Germany	AS28753Leaseweb Deutschland GmbH
4	142.251.14.94Google · CDN	United States	AS15169Google LLC
4	142.251.152.4Google · CDN	United States	AS15169Google LLC
4	192.0.77.48	San Francisco, California, United States	AS2635Automattic, Inc
4	46.165.199.9	Frankfurt am Main, Hesse, Germany	AS28753Leaseweb Deutschland GmbH
4	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	94.23.162.163	Saarbrücken, Saarland, Germany	AS16276OVH SAS
4	54.38.220.85	France	AS16276OVH SAS
173	38	-	-