Security Scan: WhatsApp

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cee00287-3a98-436e-8314-a08cd914c4a0 Domain and IP registration (RDAP)/api/v1/rdap/cee00287-3a98-436e-8314-a08cd914c4a0 Certificate Transparency/api/v1/ct/farmware.co.ke How often this domain was scanned/api/v1/domain/stats/farmware.co.ke Scan history for this domain/api/v1/domain/history/farmware.co.ke?limit=15

This website contacted 9 IPs in 2 countries across 6 domains to perform 41 HTTP transactions. The main domain is farmware.co.ke and was registered 13 years ago.

Submitted URL: https://farmware.co.ke

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Compromised-looking corporate site serving the ClearFake ClickFix/Polygon loader: two roster-anchored YARA hits (CRITICAL + HIGH) plus a malware threat-intel match on the primary domain. Do not browse or click anything on it.

Risk Factors (5)

Analyst-vetted malicious kit present: ClearFake Polygon contract loader + rival-kit cleanup script (compromised-site injection)

Two roster-anchored high-precision YARA matches, one CRITICAL (phishing) and one HIGH (phishing)

Primary domain flagged in threat intelligence as an unknown loader (malware)

Malicious script injects an overlay, strips rival ClickFix kits' scripts and blocks navigation while it is displayed — anti-analysis/social-engineering behavior

Inconsistent page metadata: title reads 'WhatsApp' while the Open Graph title is the site's own brand 'farmware' (no brands' login/payment form is present, so this is treated as tampering rather than a credential-phishing setup)

Domain age information unavailable

Details

Page Title

WhatsAppother network

Scan Type

public

Domain Name Analysis

You're looking at domain 'farmware.co.ke' on the Kenyan country-code top-level domain (.co.ke) with no subdomain. Count 8 characters in 'farmware' holding three vowels versus five consonants. Splitting it apart reveals two words: farm, ware. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.80s

Total Load Time

528 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:325 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence

Type: spa

Method: structural

All Detected Categories

corporate

70%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	84.16.249.171	Germany	AS28753Leaseweb Deutschland GmbH
4	142.251.110.97Google · CDN	United States	AS15169Google LLC
4	104.21.27.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.20.95Google · CDN	United States	AS15169Google LLC
4	142.251.14.94Google · CDN	United States	AS15169Google LLC
4	216.239.34.36Google · CDN	United States	AS15169Google LLC
4	142.251.14.97Google · CDN	United States	AS15169Google LLC
4	142.251.110.95Google · CDN	United States	AS15169Google LLC
4	216.239.32.36Google · CDN	United States	AS15169Google LLC
41	9	-	-