Security Report: sierrabluepools.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/01b861c5-79c0-4e01-89f6-5bf7e1d61f68 Domain and IP registration (RDAP)/api/v1/rdap/01b861c5-79c0-4e01-89f6-5bf7e1d61f68 Certificate Transparency/api/v1/ct/sierrabluepools.com How often this domain was scanned/api/v1/domain/stats/sierrabluepools.com Scan history for this domain/api/v1/domain/history/sierrabluepools.com?limit=15

This website contacted 19 IPs in 2 countries across 12 domains to perform 136 HTTP transactions. The main domain is sierrabluepools.com and was registered 18 years ago.

Submitted URL: https://sierrabluepools.com

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Legitimate-looking, 4-year-old pool-service site whose page carries an analyst-vetted ClickFix 'Human Verification' overlay plus CRITICAL EtherHiding malware IDS alerts and blockchain RPC calls — appears compromised and serves malicious content.

Risk Factors (6)

Known malicious kit identified by analyst-vetted roster and YARA (ClickFix Win+X fake 'Human Verification' overlay, CRITICAL phishing)

Two CRITICAL IDS alerts: ET MALWARE EtherHiding Exfil M2 (compromised-host loader/exfiltration behavior)

Page scripts contact blockchain RPC nodes (polygon-bor-rpc.publicnode.com, polygon-public.nodies.app) and issue Ethereum getDomain() calls — no legitimate reason for a pool-service site

Malicious third-party host checkyoubrowse.codes (2 independent feeds) loaded by the page

Primary domain itself reported as an 'unknown loader (malware)' in threat intelligence

Obfuscated/dynamic code execution present (1 eval() call, 5 Function() constructor calls)

Domain age information unavailable

Details

Page Title

Sierra Blue Pools – Metro Atlanta's Best Pool Companyother network

Scan Type

public

Favicon Hash

MMH3: 976987486

MD5: 4e255e72a13767100bb385561f2570ea

Domain Name Analysis

The domain name 'sierrabluepools.com' uses the commercial generic top-level domain (.com) with no subdomain. Count 15 characters in 'sierrabluepools' containing seven vowels alongside eight consonants. Tokenizing the label suggests three words: sierra, blue, pools. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.66s

Total Load Time

4.7 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:12,102 chars

Detector Agreement:50%

Website Classification

Primary Category

documentation technical94% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

94%

corporate business

91%

government public service

89%

education learning

87%

finance banking

87%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	162.159.137.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	142.251.154.119Google · CDN	United States	AS15169Google LLC
7	104.16.79.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	142.250.154.97Google · CDN	United States	AS15169Google LLC
7	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
7	142.251.20.94Google · CDN	United States	AS15169Google LLC
7	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	142.251.14.94Google · CDN	United States	AS15169Google LLC
7	142.251.13.148Google · CDN	United States	AS15169Google LLC
136	19	-	-