Security Report: schoolofcreativity.co - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bf7562a5-0d3a-4577-8620-d64df1fce6a6 Domain and IP registration (RDAP)/api/v1/rdap/bf7562a5-0d3a-4577-8620-d64df1fce6a6How often this domain was scanned/api/v1/domain/stats/schoolofcreativity.co Scan history for this domain/api/v1/domain/history/schoolofcreativity.co?limit=15

This website contacted 5 IPs in 3 countries across 4 domains to perform 74 HTTP transactions. The main domain is schoolofcreativity.co and was registered 6 years ago.

Submitted URL: https://schoolofcreativity.co

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate 6-year-old Lithuanian education site compromised with an injected ClickFix kit: a fake Cloudflare 'Human Verification' overlay tells visitors to run Win+X Terminal paste commands. Malware delivery — do not interact.

Risk Factors (5)

Injected ClickFix kit instructing users to run clipboard-pasted commands in Windows Terminal (PowerShell malware delivery)

Impersonation of Cloudflare's human-verification UI with a fake Ray ID on a non-Cloudflare page

Critical IDS malware alerts for ClickFix domain contact and EtherHiding exfiltration

Blockchain RPC endpoints (tenderly.co, nodies.app) contacted by page scripts, consistent with EtherHiding-style C2/exfil

Threat-intel malicious-host match (checkyoubrowse.codes, multi-feed) loaded as a third-party resource

Domain age information unavailable

Details

Page Title

Home - The School of Creativity

Scan Type

public

Favicon Hash

MMH3: 2107845023

MD5: c0691921e66b2cc6015a269eb1e7a44c

Domain Name Analysis

The domain name 'schoolofcreativity.co' uses the Colombian country-code top-level domain (.co). Its registrable label 'schoolofcreativity' stretches across 18 characters with seven vowels and 11 consonants. Breaking it apart gives 3 words: school, of, creativity. Expect 6 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

14.05s

Total Load Time

906 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:2,800 chars

Detector Agreement:100%

Website Classification

Primary Category

education learning46% confidence

Type: spa

Method: ml+structural

All Detected Categories

education learning

46%

technology software

43%

documentation technical

41%

government public service

39%

adult content

31%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
18	79.98.26.48	Vilnius, Vilnius, Lithuania	AS212531UAB Interneto vizija
14	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
14	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
14	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
74	5	-	-