Security Report: cloverco.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ccc68611-d49f-463c-a1ba-744a663b39ff Domain and IP registration (RDAP)/api/v1/rdap/ccc68611-d49f-463c-a1ba-744a663b39ffHow often this domain was scanned/api/v1/domain/stats/cloverco.com Scan history for this domain/api/v1/domain/history/cloverco.com?limit=15

This website contacted 39 IPs in 2 countries across 28 domains to perform 161 HTTP transactions. The main domain is cloverco.com and was registered 27 years ago.

Submitted URL: https://cloverco.com

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Legitimate 27-year-old contracting site is compromised with ClearFake/EtherHiding malware: primary-domain malware Indicators of Compromise, CRITICAL exfil IDS alerts, and a fake Cloudflare verification overlay. Avoid interacting with the page.

Risk Factors (5)

CONTENT-MALWARE Indicators of Compromise match on the scanned primary domain (ClearFake malware campaign, multi-source)

CRITICAL IDS alerts for EtherHiding exfiltration / network trojan

EtherHiding infrastructure: blockchain RPC calls to rpc-mainnet.matic.quiknode.pro and polygon-public.nodies.app

Fake Cloudflare 'Human Verification' overlay using the ClickFix social-engineering prompt

Loaded resource domain checkyoubrowse.codes flagged as malicious host by two independent feeds

Domain age information unavailable

Details

Page Title

Contracting - Commercial Projects | Clover Contractingother network

Scan Type

public

Favicon Hash

MMH3: -911855683

MD5: 8fc2f0786278a48f29bd7d7bb7d30f2c

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'cloverco.com' is registered with no subdomain. The core label 'cloverco' covers 8 characters containing three vowels alongside five consonants. Segmentation suggests two words: clover, co. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.00s

Total Load Time

3.9 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:6,849 chars

Detector Agreement:100%

Website Classification

Primary Category

adult content80% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content

80%

corporate business

57%

corporate

35%

news/blog

20%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	137.184.3.72	Santa Clara, California, United States	AS14061DigitalOcean, LLC
4	142.251.20.95Google · CDN	United States	AS15169Google LLC
4	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	18.245.60.90Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
4	52.222.136.116Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
4	142.251.152.119Google · CDN	United States	AS15169Google LLC
4	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
4	76.223.116.242Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	13.248.238.122Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	192.178.183.97Google · CDN	United States	AS15169Google LLC
161	39	-	-