Security Report: rwa.nexus - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/04d0990c-be0a-4c59-873b-9f47f4242003 Domain and IP registration (RDAP)/api/v1/rdap/04d0990c-be0a-4c59-873b-9f47f4242003How often this domain was scanned/api/v1/domain/stats/rwa.nexus Scan history for this domain/api/v1/domain/history/rwa.nexus?limit=15

This website contacted 12 IPs in 3 countries across 11 domains to perform 67 HTTP transactions. The main domain is rwa.nexus and was registered 2 years ago.

Submitted URL: https://rwa.nexus

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Likely a legitimate RWA firm's site that has been compromised: HTML carries an analyst-vetted ClickFix 'Human Verification' overlay that pulls a payload via EtherHiding from a blockchain contract, with 6 critical EtherHiding malware IDS alerts. Treat page as malware-distributing; do not interact.

Risk Factors (5)

Known malicious ClickFix/EtherHiding kit injected into the page (critical, analyst-vetted)

Multiple CRITICAL malware IDS alerts for EtherHiding exfiltration

Deliberately obfuscated script resolving its payload from a smart contract and hiding threat-feed hosts

Primary domain reported as ClearFake in threat intelligence

Blockchain RPC connections used to fetch malicious overlay content

Domain age information unavailable

Details

Page Title

睿亦富 RWA Nexus – 睿亦富 – RWA 代幣化的先行者

Scan Type

public

Favicon Hash

MMH3: -263453128

MD5: 9f72e7ff8abc51a64e050c1453616a9d

Domain Name Analysis

The domain 'rwa.nexus' uses the .nexus top-level domain and has no subdomain. Count 3 characters in 'rwa' holding one vowel versus two consonants. It segments into 2 words: rw, a. The median word length lands at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

75.13s

Total Load Time

2.2 MB

Total Size

Language Analysis

Primary Language

🇨🇳Chinese

Code: zh

Confidence:60%

Script:Han

Direction:ltr

Detection Details

HTML Lang Attribute:zh-TW

Text Length:1,602 chars

Detector Agreement:50%

Website Classification

Primary Category

corporate business99% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

99%

cryptocurrency blockchain

95%

government public service

90%

finance banking

90%

adult content

67%

Detected Features

Articles

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	1.34.17.159	New Taipei City, New Taipei City, Taiwan	AS3462Data Communication Business Group
5	142.251.110.95Google · CDN	United States	AS15169Google LLC
5	192.178.183.97Google · CDN	United States	AS15169Google LLC
5	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	192.178.183.94Google · CDN	United States	AS15169Google LLC
5	2.27.5.107	United States	AS202226Great Flower
5	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
5	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	64.130.32.46	Frankfurt am Main, Hesse, Germany	AS20326TeraSwitch Networks Inc.
67	12	-	-