Security Report: andrewsenterprises.org - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/803bd6ef-ee62-4c3d-920b-a70ef6e7b2da Domain and IP registration (RDAP)/api/v1/rdap/803bd6ef-ee62-4c3d-920b-a70ef6e7b2da Certificate Transparency/api/v1/ct/andrewsenterprises.org How often this domain was scanned/api/v1/domain/stats/andrewsenterprises.org Scan history for this domain/api/v1/domain/history/andrewsenterprises.org?limit=15

This website contacted 12 IPs in 2 countries across 12 domains to perform 42 HTTP transactions. The main domain is andrewsenterprises.org and was registered 2 months ago.

Submitted URL: https://andrewsenterprises.org

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised credit-repair blog serving a ClearFake/EtherHiding exploit kit — 14 CRITICAL IDS hits, blockchain-RPC payload delivery, and a fake Cloudflare 'verify' prompt pushing manual command execution. Do not click or follow any prompts.

Risk Factors (6)

Critical IDS malware/exploit-kit signatures (EtherHiding exfiltration, ErrTraffic check-in) indicate active malicious script delivery

Primary domain reported as ClearFake malware infrastructure

Multiple third-party resources loaded from domains flagged as exploit-kit / wp-inject infrastructure

Blockchain RPC abuse (EtherHiding) used to fetch malicious payloads immutably

Fake Cloudflare verification prompt directing users to execute manual commands (ClickFix)

Heavy Form/Functions constructor usage (8 calls) consistent with obfuscated injected code

Domain age information unavailable

Details

Page Title

Andrews Enterprises – I fix credit with wisdom

Scan Type

public

Favicon Hash

MMH3: -1102179871

MD5: 7f309774b352e3a1aabc326e47e057ad

Domain Name Analysis

The domain name 'andrewsenterprises.org' uses the non-profit oriented generic top-level domain (.org) while skipping any subdomain. Its registrable label 'andrewsenterprises' stretches across 18 characters with six vowels and 12 consonants. Word splitting yields 2 words: andrews, enterprises. Average segment length settles at 9 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

11.25s

Total Load Time

241 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,024 chars

Detector Agreement:67%

Website Classification

Primary Category

blog personal website98% confidence

Type: spa

Method: ml+structural

All Detected Categories

blog personal website

98%

documentation technical

97%

government public service

96%

cryptocurrency blockchain

94%

corporate business

92%

Detected Features

Comments

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
3	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
3	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
3	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.18.10.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
42	12	-	-