Security Scan: Strategy Finders

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cd9252ad-de8f-46e7-b93a-ce351023253b Domain and IP registration (RDAP)/api/v1/rdap/cd9252ad-de8f-46e7-b93a-ce351023253b Certificate Transparency/api/v1/ct/strategyfinders.com How often this domain was scanned/api/v1/domain/stats/strategyfinders.com Scan history for this domain/api/v1/domain/history/strategyfinders.com?limit=15

This website contacted 19 IPs in 2 countries across 16 domains to perform 126 HTTP transactions. The main domain is strategyfinders.com and was registered 4 years 3 months ago.

Submitted URL: https://strategyfinders.com

Effective URL:

https://www.strategyfinders.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Legitimate 4-year-old education site whose page has been compromised: it injects the IClickFix ClickFix/EtherHiding loader that fetches a payload via an Ethereum contract — confirmed malware distribution.

Risk Factors (5)

Compromised page injecting the IClickFix ClickFix/EtherHiding loader into visitors' browsers

Ethereum Sepolia smart-contract-based stage retrieval (EtherHiding) to fetch and execute a remote payload

Obfuscated JavaScript concealing threat-feed hosts and a second-stage fetch

Hidden SEO-spam gambling keyword block injected in the page footer (spin dog energy casino, spinational casino, chicken road, etc.)

CRITICAL network IDS malware alerts including outbound EtherHiding exfiltration

Domain age information unavailable

Details

Page Title

Strategy Finders

Scan Type

public

Favicon Hash

MMH3: -354320954

MD5: 085a9f18211d0f99c485e89db0558d04

Domain Name Analysis

Domain 'strategyfinders.com' uses the commercial generic top-level domain (.com) and has no subdomain. The core label 'strategyfinders' covers 15 characters with 4 vowels and eleven consonants. Segmentation suggests 2 words: strategy, finders. Median word length is 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

17.06s

Total Load Time

4.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:2,525 chars

Detector Agreement:100%

Website Classification

Primary Category

education learning82% confidence

Type: spa

Method: ml+structural

All Detected Categories

education learning

82%

corporate business

75%

news media journalism

39%

forum community discussion

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
18	63.141.251.138	United States	AS33387Nocix, LLC
6	142.251.110.95Google · CDN	United States	AS15169Google LLC
6	192.178.183.157Google · CDN	United States	AS15169Google LLC
6	142.251.20.97Google · CDN	United States	AS15169Google LLC
6	142.251.14.94Google · CDN	United States	AS15169Google LLC
6	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	192.178.183.154Google · CDN	United States	AS15169Google LLC
6	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	192.178.183.155Google · CDN	United States	AS15169Google LLC
126	19	-	-