Security Scan Report: sachablack.co.uk

Site favicon
Submitted: Completed: publiccompleted
This website contacted 14 IPs in 2 countries across 11 domains to perform 74 HTTP transactions. The main domain is sachablack.co.uk and was registered 11 years ago.

Submitted URL: https://sachablack.co.uk

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Legitimate 11-year-old author site that appears compromised: injected ClickFix 'Human Verification' kit with EtherHiding blockchain loader, critical IDS malware alerts and obfuscated scripts hiding malicious hosts. Do not interact.

Risk Factors (5)
Injected ClickFix fake 'Human Verification' ClickFix overlay kit identified on the page HTML (vetted malicious kit)
EtherHiding: next-stage payload address resolved from a blockchain smart contract, evading takedown
Obfuscated script concealing known-malicious hosts (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co)
CRITICAL IDS malware alerts (EtherHiding Exfil M2) and blockchain RPC traffic to this page
Unranked script host cloud-browse.codes flagged as malicious exploit-kit infrastructure by 3 feeds
Domain age information unavailable

Details

Page Title

Homepage - Sacha Black

Scan Type

public

Domain Name Analysis

You're looking at domain 'sachablack.co.uk' on the United Kingdom country-code top-level domain (.co.uk) while skipping any subdomain. Count 10 characters in 'sachablack' containing three vowels alongside 7 consonants. Breaking it apart gives two words: sacha, black. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sachablack.co.uk

Page Load Overview

3.43s
Total Load Time
2.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-GB
Text Length:3,073 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content73% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
73%
corporate
25%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
938.29.223.147Phoenix, Arizona, United States
AS174Cogent Communications, LLC
538.29.223.47Phoenix, Arizona, United States
AS174Cogent Communications, LLC
574.125.29.95Google · CDNUnited States
AS15169Google LLC
5142.251.110.97Google · CDNUnited States
AS15169Google LLC
5188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5216.239.34.36Google · CDNUnited States
AS15169Google LLC
5157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
7414--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E2E393634350433FB3D44AE49605721B52F5E50BE434619EFBA69AEFF84C8822879B37

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:nbBD8AZWAcA/1APRy12HKTM4wwiOAT1UUehmhsvSU48LJtNx7TDf:19NhWHqTM4wwiOAT1UUa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:154829:JhB0U6AQRgAlIABjBYJEO0IPBJFCOACeAXPFME3+AAIaYGCEAcAhLElUAXSGUBiQQXACiQIqYUwA+CdAIagBCkAQxioCjTaE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff83d3f3ffdf81
Perceptual Hash:acc592c76c923a6d
Difference Hash:6616373706062b2b
Wavelet Hash:bfc38181f1f38781
Color Hash:#931f3c

Scan History

Scan history not available

Unable to load historical scan data