Security Scan: SecretCrush.fun 💗

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/56458b66-576c-4e0e-bb84-d8f19d6d00bd Domain and IP registration (RDAP)/api/v1/rdap/56458b66-576c-4e0e-bb84-d8f19d6d00bdHow often this domain was scanned/api/v1/domain/stats/secretcrush.fun Scan history for this domain/api/v1/domain/history/secretcrush.fun?limit=15

This website contacted 18 IPs in 1 country across 17 domains to perform 55 HTTP transactions. The main domain is secretcrush.fun and was registered 8 months ago.

Submitted URL: https://secretcrush.fun

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

ClickFix fake-CAPTCHA malware page: a fake Cloudflare verification tells Windows users to paste a LOLBin command into Terminal. Roster-anchored YARA hits, CRITICAL EtherHiding IDS alerts and a multi-feed malware flag on the domain confirm it.

Risk Factors (6)

Known malicious ClickFix FakeCAPTCHA kit served to Windows visitors (analyst-vetted roster match)

Instruction to paste and execute an attacker-supplied command into terminal/PowerShell (LOLBin execution)

Fake Cloudflare 'human verification' overlay used to justify the paste command

CRITICAL IDS alerts for EtherHiding malware exfiltration, plus blockchain RPC connections consistent with EtherHiding delivery

Primary domain flagged as malware by two independent threat-intelligence feeds

Unranked domain with no legitimacy signals (legitimacy score 10/100)

Domain age information unavailable

Details

Page Title

SecretCrush.fun 💗

Scan Type

public

Favicon Hash

MMH3: -142612151

MD5: d481afde7e3937ff51aa47c33b870c04

Domain Name Analysis

Within the .fun top-level domain, 'secretcrush.fun' is registered without a subdomain. The registrable portion 'secretcrush' spans 11 characters with three vowels and eight consonants. Word splitting yields two words: secret, crush. The median word length lands at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.27s

Total Load Time

706 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,209 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software89% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

89%

documentation technical

71%

adult content

56%

phishing scam

47%

government public service

45%

Detected Features

Comments

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.20.95Google · CDN	United States	AS15169Google LLC
3	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.14.94Google · CDN	United States	AS15169Google LLC
3	172.217.114.4Google · CDN	United States	AS15169Google LLC
3	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	35.71.129.99Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
55	18	-	-