Security Scan: Rich Blecher

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/73750392-28dc-497b-8d1f-e41b9fc55823 Domain and IP registration (RDAP)/api/v1/rdap/73750392-28dc-497b-8d1f-e41b9fc55823How often this domain was scanned/api/v1/domain/stats/richblecher.com Scan history for this domain/api/v1/domain/history/richblecher.com?limit=15

This website contacted 18 IPs in 2 countries across 15 domains to perform 110 HTTP transactions. The main domain is richblecher.com and was registered 1 year 9 months ago.

Submitted URL: https://richblecher.com

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised author site serving an injected ClickFix 'Human Verification' overlay that pushes visitors to run pasted commands in Windows Terminal; CRITICAL YARA plus 19 CRITICAL IDS ClickFix/EtherHiding alerts confirm malware delivery.

Risk Factors (5)

Known malicious ClickFix (Win+X / Terminal) overlay kit confirmed by analyst-vetted roster and CRITICAL YARA rule

19 CRITICAL network IDS alerts for ClickFix, ClickFix cookie, ClickFix domain and EtherHiding exfiltration

Fake Cloudflare 'Human Verification' security-check impersonation with spoofed Ray ID

Instructions to paste and execute attacker-supplied commands in Windows Terminal (malware delivery / infostealer)

Blockchain RPC endpoints contacted for payload retrieval (EtherHiding pattern)

Domain age information unavailable

Details

Page Title

Rich Blecher

Scan Type

public

Favicon Hash

MMH3: -1703932025

MD5: 61a9ea5d4746a6b6d7322df7622633f9

Domain Name Analysis

The domain name 'richblecher.com' uses the commercial generic top-level domain (.com) with no subdomain. The core label 'richblecher' covers 11 characters split between 3 vowels and 8 consonants. Segmentation suggests 3 words: rich, b, lecher. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

36.89s

Total Load Time

5.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:5,635 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service47% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

47%

adult content

47%

news media journalism

34%

social_media

25%

forum

25%

Detected Features

Articles

Comments

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	160.153.0.173Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
6	23.207.210.148Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
6	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
6	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	104.26.3.238Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
110	18	-	-