Security Scan: Myanmar International Education Initiative

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f42d8bd9-20a2-4f0c-83a0-a713439416dc Domain and IP registration (RDAP)/api/v1/rdap/f42d8bd9-20a2-4f0c-83a0-a713439416dcHow often this domain was scanned/api/v1/domain/stats/miei.education Scan history for this domain/api/v1/domain/history/miei.education?limit=15

This website contacted 11 IPs in 2 countries across 10 domains to perform 101 HTTP transactions. The main domain is miei.education and was registered 3 years 11 months ago.

Submitted URL: https://www.miei.education

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate MIEI education site appears compromised: injected ClickFix kit draws a fake Cloudflare check and tells Windows users to paste a Win+X Terminal command, with CRITICAL EtherHiding exfil IDS alerts. Do not follow the instructions.

Risk Factors (5)

Known ClickFix (Win+X terminal paste) phishing/malware kit injected into the page (roster-anchored, YARA-confirmed)

Fake Cloudflare bot-verification overlay impersonating Cloudflare's security check ('Performance and Security by Cloudflare', Ray ID)

Instructions to open PowerShell/Terminal and paste an attacker-supplied command (remote code execution lure)

19 CRITICAL IDS alerts for EtherHiding exfiltration (malware C2/exfil channel)

Threat-intel malware reports tied to the domain and to a third-party resource it loads

Domain age information unavailable

Details

Page Title

Myanmar International Education Initiative

Scan Type

public

Favicon Hash

MMH3: 1371325087

MD5: 1d1cb093275e909706150ad60cc4e76d

Domain Name Analysis

You're looking at domain 'www.miei.education' on the .education top-level domain; it also runs on subdomain 'www'. Its registrable label 'miei' stretches across 4 characters containing 3 vowels alongside one consonant. Segmentation suggests two words: mie, i. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.65s

Total Load Time

2.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,372 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software71% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

71%

education

45%

documentation technical

45%

education learning

31%

government public service

31%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	172.67.203.238Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	146.75.120.237Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
9	34.160.236.44Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
9	146.75.120.238Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
9	2.16.110.35Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
9	104.21.44.216Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
9	34.111.175.102Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
9	172.67.142.245Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
101	11	-	-