Security Report: candleofhope.us - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a7961a3a-5181-4d6f-b344-782fd03677d1 Domain and IP registration (RDAP)/api/v1/rdap/a7961a3a-5181-4d6f-b344-782fd03677d1 Certificate Transparency/api/v1/ct/candleofhope.us How often this domain was scanned/api/v1/domain/stats/candleofhope.us Scan history for this domain/api/v1/domain/history/candleofhope.us?limit=15

This website contacted 22 IPs in 3 countries across 16 domains to perform 337 HTTP transactions. The main domain is candleofhope.us and was registered 18 years ago.

Submitted URL: https://candleofhope.us

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Legitimate charity site appears compromised: it loads ClearFake/EtherHiding exploit-kit domains (multi-source Indicators of Compromise) and triggers CRITICAL IDS alerts for EtherHiding exfiltration and the AMOS loader. Avoid interaction.

Risk Factors (3)

Compromised WordPress donation site injecting ClearFake/EtherHiding malware infrastructure

Critical IDS malware alerts for AMOS loader and EtherHiding exfiltration

Multiple corroborated Indicators of Compromise on resources the page loads

Domain age information unavailable

Details

Page Title

Candle Of Hope Foundation – Donation & Charity Non-Profit WordPress Theme

Scan Type

public

Favicon Hash

MMH3: -1628485557

MD5: 54cca021c4147c9c626919f5beef610e

Domain Name Analysis

Domain 'candleofhope.us' uses the United States country-code top-level domain (.us) with no subdomain. The registrable portion 'candleofhope' spans 12 characters holding five vowels versus 7 consonants. Breaking it apart gives three words: candle, of, hope. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

90.50s

Total Load Time

17.6 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:69,753 chars

Detector Agreement:75%

Website Classification

Primary Category

healthcare medical72% confidence

Type: spa

Method: ml+structural

All Detected Categories

healthcare medical

72%

government public service

71%

education learning

61%

forum community discussion

38%

e-commerce

25%

Detected Features

Payment

Articles

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
22	160.153.0.161Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
15	142.251.14.95Google · CDN	United States	AS15169Google LLC
15	3.174.46.121Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
15	89.208.107.148	Amsterdam, North Holland, Netherlands	AS210644Aeza Group LLC
15	13.226.244.124Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
15	23.207.210.148Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
15	142.251.13.95Google · CDN	United States	AS15169Google LLC
15	146.75.120.176Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
15	13.226.244.88Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
15	2.16.106.162Akamai · CDN	Amsterdam, North Holland, Netherlands	AS20940Akamai International B.V.
337	22	-	-