Security Scan Report: pawscessories.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 25 IPs in 2 countries across 18 domains to perform 113 HTTP transactions. The main domain is pawscessories.com and was registered 6 years ago.

Submitted URL: https://pawscessories.com

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Legitimate-looking dog-care blog whose domain is flagged as ClearFake and which loads an exploit-kit host plus EtherHiding blockchain RPC traffic under CRITICAL IDS malware alerts — likely compromised, do not interact.

Risk Factors (5)
Primary domain flagged as ClearFake (content-malware/exploit kit) by threat intelligence
Multi-feed corroborated exploit-kit indicator on a script host loaded by the page
CRITICAL IDS malware alerts for EtherHiding exfiltration technique
Sustained blockchain RPC traffic indicative of smart-contract-hosted payload retrieval
Obfuscated JavaScript and hex-encoded content observed in page behaviour
Domain age information unavailable

Details

Page Title

Top Dog Care Tips & Products | Pawscessories

Scan Type

public

Domain Name Analysis

The domain 'pawscessories.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'pawscessories' spans 13 characters holding five vowels versus 8 consonants. Segmentation suggests four words: paws, ces, so, ries. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

-? fen Coe tan © Cag Sareq oq Pats! teen Adis © Sel we FX howe ee eee An Online Resource Fo Dog Owners Peer wrerere & bas tant hy 6 lenty of eres al Bay porary whe Nat tome Penh # ot Che 0) pad & &...

Page Load Overview

11.10s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:5,217 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical36% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
36%
corporate
35%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1752.57.221.121Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
4172.67.199.186Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4192.178.183.157Google · CDNUnited States
AS15169Google LLC
4104.21.42.32Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.21.63.106Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.20.97Google · CDNUnited States
AS15169Google LLC
4104.26.6.146Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.67.72.90Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11325--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T189742F727B81533A820907EB802DB12B56EDCA23F72520DCE3EB54EDE9A4DCB5079751

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:aviHg3ZdhNrxaCi86xmVT+d6uLWLxSJ3+cIaB5GSVlaG:UdTMm6xkG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:359180:hGRCgATuEKKxIDCE7AAgoGPBFOAhQFQLwIBIZUCIjCEIAAJTuES0AKhXAIQkCIAgETQCGAQ4JogJ5AIJ+AHER0thCMuhQUHH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000000000ffff
Perceptual Hash:ea49995699b464b5
Difference Hash:3331252525252933
Wavelet Hash:f8f0c09080a0ffff
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data