Security Scan: Sligh Fox Inc.

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9a39fc1e-0a76-4cad-916e-6e2fb7cda988 Domain and IP registration (RDAP)/api/v1/rdap/9a39fc1e-0a76-4cad-916e-6e2fb7cda988How often this domain was scanned/api/v1/domain/stats/slighfoxinc.com Scan history for this domain/api/v1/domain/history/slighfoxinc.com?limit=15

This website contacted 15 IPs in 2 countries across 12 domains to perform 137 HTTP transactions. The main domain is slighfoxinc.com and was registered 10 years ago.

Submitted URL: https://slighfoxinc.com

Effective URL:

https://www.slighfoxinc.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate 10-year-old financial-coaching WordPress site that has been compromised and injected with ClearFake/ClickFix blockchain loader malware, a fake Cloudflare verification overlay and gambling spam. Do not interact.

Risk Factors (7)

Two CRITICAL analyst-vetted malicious kits (ClickFix Win+X overlay, ClearFake Polygon loader) injected into the HTML body

Multi-stage ClickFix chain: fake Cloudflare captcha overlaid on the real page with Windows Terminal key-combo instructions

EtherHiding: next-stage payload address retrieved from a Polygon smart contract via public RPC nodes

Obfuscated inline script concealing threats-feed-listed blockchain RPC hosts

Cross-origin POST to cdn-asset-proxy.markshepcdn.workers.dev for obfuscated asset proxying

Injected SEO/gambling spam content unrelated to the site's stated financial-coaching business

UNRANKED domain in Cisco Umbrella despite being a 10-year-old site — consistent with a legitimate site that has been compromised

Domain age information unavailable

Details

Page Title

Sligh Fox Inc.

Scan Type

public

Domain Name Analysis

The domain 'slighfoxinc.com' uses the commercial generic top-level domain (.com) without a subdomain. The core label 'slighfoxinc' covers 11 characters with three vowels and eight consonants. Splitting it apart reveals five words: s, lig, h, fox, inc. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

90.16s

Total Load Time

6.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:4,104 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking72% confidence

Type: spa

Method: ml+structural

All Detected Categories

finance banking

72%

entertainment media

57%

government public service

49%

education learning

49%

adult content

49%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	65.254.248.139	Ashburn, Virginia, United States	AS29873Newfold Digital, Inc.
9	104.21.27.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	142.251.14.95Google · CDN	United States	AS15169Google LLC
9	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
9	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
9	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
9	104.21.50.242Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	142.251.110.94Google · CDN	United States	AS15169Google LLC
9	104.21.38.103Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
137	15	-	-