Security Report: quickwech.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/19799dd1-d9e0-4f59-bfdc-8803701cecde Domain and IP registration (RDAP)/api/v1/rdap/19799dd1-d9e0-4f59-bfdc-8803701cecdeHow often this domain was scanned/api/v1/domain/stats/quickwech.com Scan history for this domain/api/v1/domain/history/quickwech.com?limit=15

This website contacted 8 IPs in 2 countries across 7 domains to perform 23 HTTP transactions. The main domain is quickwech.com and was registered 5 years ago.

Submitted URL: https://quickwech.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Well-established financial-rates page compromised with an injected ClickFix/EtherHiding blockchain loader; YARA kit match and CRITICAL IDS alerts confirm malware delivery — do not interact, report the compromise.

Risk Factors (5)

Known ClickFix 'Human Verification' overlay kit injected into the page (YARA-confirmed, analyst-vetted roster)

EtherHiding / blockchain-hosted second-stage loader using Polygon smart contracts

Obfuscated inline script concealing threat-feed RPC hosts (1rpc.io, polygon.gateway.tenderly.co)

Multi-source malicious domain indicators among the page's loaded third-party resources

IDS CRITICAL malware alerts for EtherHiding exfiltration

Domain age information unavailable

Details

Page Title

QuickWech – Financial Intelligence

Scan Type

public

Favicon Hash

MMH3: 303306702

MD5: afc72bc11db665794fc9d338fe980913

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'quickwech.com' is registered while skipping any subdomain. Count 9 characters in 'quickwech' with three vowels and 6 consonants. Segmentation suggests three words: quick, we, ch. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

9.38s

Total Load Time

136 KB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:650 chars

Detector Agreement:50%

Website Classification

Primary Category

adult content27% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

adult content

27%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	95.90.166.153	Dresden, Saxony, Germany	AS3209Vodafone GmbH
2	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.21.38.103Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
2	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
23	8	-	-