Security Report: envirotechgt.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8af9ffd8-5c64-40ae-b305-284d1c21aae1 Domain and IP registration (RDAP)/api/v1/rdap/8af9ffd8-5c64-40ae-b305-284d1c21aae1How often this domain was scanned/api/v1/domain/stats/envirotechgt.com Scan history for this domain/api/v1/domain/history/envirotechgt.com?limit=15

This website contacted 40 IPs in 2 countries across 27 domains to perform 289 HTTP transactions. The main domain is envirotechgt.com and was registered 6 years ago.

Submitted URL: https://envirotechgt.com

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Legitimate 6-year-old Envirotech site appears compromised: it serves a fake Cloudflare verification (ClickFix) prompting terminal command execution, with ClearFake malware IoCs on the primary domain and CRITICAL EtherHiding exfiltration alerts. Do not interact.

Risk Factors (5)

Fake Cloudflare verification / ClickFix prompt instructing users to run terminal commands (malware dropper)

Primary domain flagged as ClearFake malware by multi-source threat intelligence

CRITICAL IDS alerts for EtherHiding payload exfiltration

Page loads scripts/infrastructure from flagged domains (rebrato.com, seconurl.com, checkyoubrowse.codes) and a suspicious third-party IP (178.16.52.101, ClearFake EK)

Blockchain RPC / smart-contract request activity consistent with EtherHiding payload hosting

Domain age information unavailable

Details

Page Title

Inicio - Envirotech

Scan Type

public

Favicon Hash

MMH3: -349617787

MD5: c03fafc4f382538780388595a66125d4

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'envirotechgt.com' is registered and has no subdomain. The second-level label 'envirotechgt' is 12 characters long with 4 vowels and 8 consonants. Splitting it apart reveals five words: en, vi, rote, c, hgt. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

90.13s

Total Load Time

11.4 MB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:2,696 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical85% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

85%

corporate

35%

government public service

27%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
16	54.81.241.254Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
7	142.250.154.97Google · CDN	United States	AS15169Google LLC
7	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
7	142.251.127.155Google · CDN	United States	AS15169Google LLC
7	104.16.139.209Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	104.16.6.65Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
7	18.66.112.106Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
7	104.16.108.254Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
289	40	-	-