Security Scan Report: rotary4littlehearts.org

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 10 HTTP transactions. The main domain is rotary4littlehearts.org and was registered 2 years 5 months ago.

Submitted URL: https://rotary4littlehearts.org

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

Established charity domain appears compromised and serving the ClearFake EtherHiding loader from a malicious third-party script host; no forms or impersonation, but the injected malware chain makes the page unsafe to visit.

Risk Factors (5)
ClearFake phishing/malware kit injected into page HTML (analyst-vetted kit roster match)
EtherHiding: next-stage server address retrieved from a blockchain smart contract to evade takedown
Obfuscated script hiding known-attacker RPC hosts (1rpc.io, polygon.drpc.org, polygon.publicnode.com)
Third-party script host wp-elementor.com reported as malicious injection
Single-source threat-intel report naming the primary domain as a malware loader
Domain age information unavailable

Details

Page Title

Rotary for Little Hearts

Scan Type

public

Domain Name Analysis

You're looking at domain 'rotary4littlehearts.org' on the non-profit oriented generic top-level domain (.org) without a subdomain. Count 19 characters in 'rotary4littlehearts' containing 6 vowels alongside twelve consonants, plus one digit. Breaking it apart gives 4 words: rotary, 4, little, hearts. The median word length lands at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Rotary for Little Hearts Archives

Page Load Overview

0.61s
Total Load Time
41 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:274 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media48% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
48%
gambling betting
44%
adult content
30%
government public service
30%
news media journalism
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.67.133.101Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.210.2Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.5.122Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.66.243Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
104--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FA133A32A29010113B4FC7E9A363B2E8E65DB409DF455A1FF0A835249E849B395F7B3D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:QWDZdypa9vV/uNBgTxk60QXS9m50b3g0UPP2Yr9l5aI6krkJFm8dtR3+tAjzJypR:QYypizsCTw9vR/x/C

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:45340:EgIG0FZi8YBisQmAhRGLhDKBeQEgmDKsgkBCdRCLsOEYwyQDXTAAZYpKhJyBtABKhACVAkhsIiQBDACgxCIBEWIRAAszFwhD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8f9fffffffffffff
Perceptual Hash:bc3c3c3c3831f1e1
Difference Hash:3020000000000000
Wavelet Hash:8090f0f0f0f0f0f0
Color Hash:N/A

Other Hashes

Crop Resistant:3020000000000000

Scan History

Scan history not available

Unable to load historical scan data