Security Scan: Myanmar International Education Initiative

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d4af0c69-eb13-4a4e-8485-e57ecf23878b Domain and IP registration (RDAP)/api/v1/rdap/d4af0c69-eb13-4a4e-8485-e57ecf23878bHow often this domain was scanned/api/v1/domain/stats/miei.education Scan history for this domain/api/v1/domain/history/miei.education?limit=15

This website contacted 11 IPs in 2 countries across 10 domains to perform 99 HTTP transactions. The main domain is miei.education and was registered 3 years 11 months ago.

Submitted URL: https://www.miei.education/

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate MIEI education site appears compromised: injected ClickFix kit draws a fake Cloudflare check and tells Windows users to paste a Win+X Terminal command, with CRITICAL EtherHiding exfil IDS alerts. Do not follow the instructions.

Risk Factors (5)

Known ClickFix (Win+X terminal paste) phishing/malware kit injected into the page (roster-anchored, YARA-confirmed)

Fake Cloudflare bot-verification overlay impersonating Cloudflare's security check ('Performance and Security by Cloudflare', Ray ID)

Instructions to open PowerShell/Terminal and paste an attacker-supplied command (remote code execution lure)

19 CRITICAL IDS alerts for EtherHiding exfiltration (malware C2/exfil channel)

Threat-intel malware reports tied to the domain and to a third-party resource it loads

Domain age information unavailable

Details

Page Title

Myanmar International Education Initiative

Scan Type

public

Favicon Hash

MMH3: 1371325087

MD5: 1d1cb093275e909706150ad60cc4e76d

Domain Name Analysis

Within the .education top-level domain, 'www.miei.education' is registered with subdomain 'www'. The second-level label 'miei' is 4 characters long split between three vowels and one consonant. It segments into two words: mie, i. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.54s

Total Load Time

2.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,372 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software69% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

69%

education

45%

documentation technical

44%

government public service

29%

education learning

29%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	104.21.44.216Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	184.30.212.39Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
9	34.160.236.44Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
9	146.75.120.238Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
9	2.21.239.141Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
9	172.67.203.238Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
9	34.111.175.102Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
9	104.21.27.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
99	11	-	-