ScanMalware.com

Security Scan Report: www.ewg.org

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5411013f-a308-4df2-873f-dc39b6384edcDomain and IP registration (RDAP)/api/v1/rdap/5411013f-a308-4df2-873f-dc39b6384edcHow often this domain was scanned/api/v1/domain/stats/ewg.orgScan history for this domain/api/v1/domain/history/ewg.org?limit=15
This website contacted 16 IPs in 2 countries across 18 domains to perform 17 HTTP transactions. The main domain is ewg.org and was registered 31 years ago.

Submitted URL: https://www.ewg.org/foodnews/dirty-dozen.php

The Cisco Umbrella rank of the primary domain is #136,695 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 70%

0
Risk Score

No concrete malicious signals; site appears legitimate despite limited visible content.

Safety Factors (3)
Long‑standing domain registration
Clean threat‑intel reputation
No malicious YARA or IDS detections
Domain age information unavailable

Details

Page Title

EWG's Shopper's Guide to Pesticides in Produce | Dirty Dozenother network

Scan Type

public

Domain Name Analysis

Domain 'www.ewg.org' uses the non-profit oriented generic top-level domain (.org), featuring subdomain 'www'. The core label 'ewg' covers 3 characters containing 1 vowel alongside 2 consonants. Tokenizing the label suggests 2 words: ew, g. Median word length comes out to 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.ewg.org/foodnews/dirty-dozen.php

Page Load Overview

0.48s
Total Load Time
404 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:376 chars
Detector Agreement:100%

Website Classification

Primary Category

malicious59% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

malicious
59%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.19.138Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.36.104Google · CDNUnited States
AS15169Google LLC
1142.251.140.170Google · CDNUnited States
AS15169Google LLC
1184.24.77.146Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
13.174.46.80Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1104.18.18.138Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.250.186.35Google · CDNUnited States
AS15169Google LLC
120.209.68.129Azure · CLOUDBoydton, Virginia, United States
AS8075Microsoft Corporation
1172.67.68.125Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1716--

Detected Technologies1

X-UA-Compatible
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17E03F6B3A8F05077424283D6B532B739BEA79017DF96C944B1FC4B98AF95DAA8C0344D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:uh8Cwju7m0ztwM3eEDiCaHpHiSpjgUfqGNiFRWjuKQ5cBnlwVfbQFx/jltCQxds:uh8tu7xztwM3WCaHpHiStLfqGNiFRWji

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:38274:IVgAgQjTECYkCEBiMgRFnUIrQUQBcAMZWDaoL1pwAqQAGUSFDIRoBwUeUgjQ7oQsATUAAAcFSEOiQIARoGFEABCA0CYMCDqF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000000ffffff
Perceptual Hash:a815b5957dd2ee02
Difference Hash:9656ed3193e1cc27
Wavelet Hash:fb00000001ffffff
Color Hash:#3a4078

Other Hashes

Crop Resistant:9656ed3193e1cc27,969657ed293193e1,5353d3d3d1737373

Scan History

Scan history not available

Unable to load historical scan data