Security Report: chrismooneysingh.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4d96db9c-3a45-4307-bfd5-5ac69ab045a5 Domain and IP registration (RDAP)/api/v1/rdap/4d96db9c-3a45-4307-bfd5-5ac69ab045a5How often this domain was scanned/api/v1/domain/stats/chrismooneysingh.com Scan history for this domain/api/v1/domain/history/chrismooneysingh.com?limit=15

This website contacted 13 IPs in 3 countries across 11 domains to perform 125 HTTP transactions. The main domain is chrismooneysingh.com and was registered 16 years ago.

Submitted URL: https://chrismooneysingh.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Established author site is compromised and serves an injected ClickFix WinX fake Cloudflare 'Human Verification' overlay plus an EtherHiding blockchain loader; page-served resources and the domain itself match malware threat feeds.

Risk Factors (6)

Injected ClickFix WinX fake 'Human Verification' overlay tricking visitors into pasting PowerShell into Terminal

EtherHiding blockchain-based second-stage loader (Polygon smart contract) hiding the overlay host

Obfuscated script with threat-feed hosts (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co) visible only after decoding

Primary domain flagged as malware by 2 independent threat-intel feeds

Critical network IDS alerts for malware, ClickFix domain resolution and exploit-kit check-in

Unranked third-party script host browse-codes-enter.beer serving code to the page

Domain age information unavailable

Details

Page Title

Home - chrismooneysingh.com

Scan Type

public

Favicon Hash

MMH3: 530492348

MD5: dcab89b8e04bf53fcd7f6a44a8cb4fae

Domain Name Analysis

You're looking at domain 'chrismooneysingh.com' on the commercial generic top-level domain (.com) without a subdomain. The second-level label 'chrismooneysingh' is 16 characters long with 5 vowels and 11 consonants. It segments into 3 words: chris, mooney, singh. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.43s

Total Load Time

3.2 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:8,572 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence

Type: spa

Method: structural

All Detected Categories

corporate

70%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	45.76.150.249	Singapore, Singapore	AS20473The Constant Company, LLC
9	142.251.14.95Google · CDN	United States	AS15169Google LLC
9	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
9	104.21.3.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
9	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
9	185.111.111.155	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
9	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	142.250.154.95Google · CDN	United States	AS15169Google LLC
125	13	-	-