Security Report: redandwhitemagzz.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ad901998-3566-4b87-ab0e-10dc2f4a174d Domain and IP registration (RDAP)/api/v1/rdap/ad901998-3566-4b87-ab0e-10dc2f4a174d Certificate Transparency/api/v1/ct/redandwhitemagzz.com How often this domain was scanned/api/v1/domain/stats/redandwhitemagzz.com Scan history for this domain/api/v1/domain/history/redandwhitemagzz.com?limit=15

This website contacted 18 IPs in 3 countries across 12 domains to perform 39 HTTP transactions. The main domain is redandwhitemagzz.com and was registered 1 month ago.

Submitted URL: https://redandwhitemagzz.com

Effective URL:

https://www.redandwhitemagzz.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

A Liverpool FC fan blog whose page has been compromised and injected with a ClickFix/EtherHiding blockchain loader that serves a fake 'Human Verification' overlay; correlated CRITICAL IDS malware alerts and analyst-vetted kit identification confirm active malware distribution.

Risk Factors (5)

Compromised page distributing a ClickFix 'Human Verification' social-engineering overlay that instructs Windows users to open Terminal and run malicious commands

EtherHiding: packed/obfuscated script retrieves its payload address from a blockchain contract, evading takedown

Obfuscated script conceals threat-feed C2/RPC hosts (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co)

Multiple malware-family threat-intel matches (ClearFake/EtherHiding ecosystem) on resources loaded by the page

Injected casino/SEO spam content unrelated to the site's legitimate topic

Domain age information unavailable

Details

Page Title

/Redandwhitemagz.com – Your Ultimate Destination For Everything Liverpool FC! - /Redandwhitemagz.com

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'redandwhitemagzz.com' is registered without a subdomain. The registrable portion 'redandwhitemagzz' spans 16 characters split between 5 vowels and eleven consonants. Segmentation suggests five words: red, and, white, mag, zz. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.32s

Total Load Time

4.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:24,627 chars

Detector Agreement:100%

Website Classification

Primary Category

blog personal website63% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

blog personal website

63%

news/blog

35%

corporate

35%

news media journalism

33%

social media network

29%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	66.33.215.40	Schiphol, North Holland, Netherlands	AS22611InMotion Hosting, Inc.
2	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.14.132Google · CDN	United States	AS15169Google LLC
2	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
2	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.165.144Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.110.101Google · CDN	United States	AS15169Google LLC
2	142.251.150.119Google · CDN	United States	AS15169Google LLC
2	104.21.3.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
39	18	-	-