Security Scan: Blue Rock Financing

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/30980f83-6a62-4c1b-8462-adc68c8a91b2 Domain and IP registration (RDAP)/api/v1/rdap/30980f83-6a62-4c1b-8462-adc68c8a91b2How often this domain was scanned/api/v1/domain/stats/bluerockfinancing.com Scan history for this domain/api/v1/domain/history/bluerockfinancing.com?limit=15

This website contacted 10 IPs in 3 countries across 9 domains to perform 97 HTTP transactions. The main domain is bluerockfinancing.com and was registered 11 months ago.

Submitted URL: https://bluerockfinancing.com/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Site is compromised and serves a ClearFake/ClickFix kit: a fake Cloudflare 'Human Verification' overlay tells Windows users to press Win+X, paste into Terminal, and hit Enter, with an EtherHiding Polygon contract loader. Do not interact.

Risk Factors (5)

Injected ClickFix / ClearFake malware kit on the page (analyst-vetted, roster-anchored YARA hits)

EtherHiding loader reading server list from a Polygon smart contract (CRITICAL IDS: EtherHiding Exfil M2)

Fake Cloudflare 'Human Verification' overlay impersonating Cloudflare branding and issuing keyboard-paste instructions

Primary domain flagged as 'unknown loader (malware)' by threat intelligence

Obfuscated JS / blockchain RPC calls used as C2 resolution channel

Domain age information unavailable

Details

Page Title

Blue Rock Financing

Scan Type

public

Favicon Hash

MMH3: -1121449354

MD5: 054144d42c921cc3ccbf20521bc38c54

Domain Name Analysis

The domain 'bluerockfinancing.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'bluerockfinancing' spans 17 characters containing 6 vowels alongside 11 consonants. Word splitting yields 3 words: blue, rock, financing. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

11.39s

Total Load Time

2.6 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:4,278 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business59% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

59%

finance banking

41%

social media network

33%

adult content

32%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
16	50.6.3.112	Ashburn, Virginia, United States	AS31898Oracle Corporation
9	142.251.20.95Google · CDN	United States	AS15169Google LLC
9	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	142.251.20.94Google · CDN	United States	AS15169Google LLC
9	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	149.56.95.166	Montreal, Quebec, Canada	AS16276OVH SAS
9	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
9	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
97	10	-	-