Security Scan Report: rcrsinnovations.com

Site favicon
Submitted: Sep 25, 2026, 12:02:29 PMCompleted: Sep 25, 2026, 12:04:20 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Legitimate 6-year-old battery manufacturer site that has been compromised and is serving EtherHiding/ClearFake malware and TDS-linked scripts to visitors. Avoid browsing until cleaned.

Risk Factors
Compromised site injecting EtherHiding/ClearFake malware via third-party scripts
CRITICAL IDS malware alerts indicating outbound exfiltration
Malicious traffic-distribution-system domains and ClearFake exploit-kit domain loaded by the page
Blockchain RPC and smart-contract calls used as covert C2 channel
High-entropy throwaway domain (gsdfguhjsdfgdfjg.xyz) loaded as a sub-resource
Domain age information unavailable

Details

Page Title

RCRS Innovations : Lithium ion battery manufacturer – RCRS

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'rcrsinnovations.com' is registered. The second-level label 'rcrsinnovations' is 15 characters long split between 5 vowels and 10 consonants. Segmentation suggests three words: r, crs, innovations. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rcrsinnovations.com

Page Load Overview

75.08s
Total Load Time
4.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:10,400 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog40% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
40%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21208.91.198.178Phoenix, Arizona, United States
AS46606Unified Layer
13104.21.38.103Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13142.251.110.95Google · CDNUnited States
AS15169Google LLC
13104.21.14.6Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13185.94.99.250Iran
AS204213Netmihan Communication Company Ltd
13178.16.53.137Amsterdam, North Holland, Netherlands
AS202412Omegatech LTD
13172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13142.251.110.94Google · CDNUnited States
AS15169Google LLC
1385.239.147.30Bulgaria
AS213474HomeLine Broadband LLC
13172.67.221.251Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13810--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EF84E8A239C93425020F13AB631775DCF0A689A6F98083D1FABDB558E7B1E41B7D34B4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:K1DLkFksOketgRHnLSomSkPo0pXdX9ahT4O30fJwTD9SPLWJ46VJAiN6:kUUHGRH2YkFdXGTefJ3PLWJ46VJAiN6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:377135:YhAigYLwADKiwIDClIihSmImKgdBADQfBAjKQioYzigKBQFkUIpApW8VCRGLE2IF+ghSiTEIAIVBZACF8QklkIABBCkxD5Xs

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:feffffffffffffff
Perceptual Hash:d5555555555555a1
Difference Hash:0000000000000000
Wavelet Hash:0e0e0e0e02020202
Color Hash:#79d2b2

Other Hashes

Crop Resistant:0000000000000000

Scan History

Scan history not available

Unable to load historical scan data