Security Report: laofarmers.net - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ec7fdefa-06cf-48d7-b48c-e0e49433916a Domain and IP registration (RDAP)/api/v1/rdap/ec7fdefa-06cf-48d7-b48c-e0e49433916aHow often this domain was scanned/api/v1/domain/stats/laofarmers.net Scan history for this domain/api/v1/domain/history/laofarmers.net?limit=15

This website contacted 11 IPs in 2 countries across 8 domains to perform 48 HTTP transactions. The main domain is laofarmers.net and was registered 12 years ago.

Submitted URL: https://laofarmers.net

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate Lao Farmer Association site compromised with a ClickFix Win+X fake-verification overlay that tricks Windows users into pasting PowerShell; analyst-vetted kit and CRITICAL IDS alerts confirm malware distribution.

Risk Factors (5)

Injected ClickFix fake 'Human Verification' overlay that directs visitors to paste attacker-supplied PowerShell into Windows Terminal

Page actively contacts ClickFix/blockchain-RPC infrastructure (gateway.tenderly.co, polygon.gateway.tenderly.co) via XMLHttpRequest — EtherHiding-style abuse

CRITICAL IDS alerts for ClickFix domain and EtherHiding exfiltration

Site impersonates Cloudflare security-check branding to lend credibility to the malicious instruction sequence

Compromised 12-year-old domain (laofarmers.net) serving injected third-party script ('checkyoubrowse.codes' among external domains)

Domain age information unavailable

Details

Page Title

Lao Farmer Association – By the farmers for the farmers

Scan Type

public

Favicon Hash

MMH3: -1273571854

MD5: 1d30c6018a62f1e5aa3af605a64dd72e

Domain Name Analysis

The domain 'laofarmers.net' uses the network infrastructure generic top-level domain (.net) with no subdomain. The registrable portion 'laofarmers' spans 10 characters split between four vowels and six consonants. Tokenizing the label suggests two words: lao, farmers. Median word length comes out to five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.02s

Total Load Time

5.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:5,527 chars

Detector Agreement:75%

Website Classification

Primary Category

unknown0% confidence

Type: spa

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	70.32.23.100	Detroit, Michigan, United States	AS55293A2 Hosting, Inc.
4	104.26.9.123Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	192.178.183.113Google · CDN	United States	AS15169Google LLC
4	142.251.20.95Google · CDN	United States	AS15169Google LLC
4	142.251.14.95Google · CDN	United States	AS15169Google LLC
4	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
4	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
4	104.26.8.123Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
48	11	-	-