Security Scan: Regnant IT Solutions

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bac0b690-82ca-49c7-be61-148b5faccc28 Domain and IP registration (RDAP)/api/v1/rdap/bac0b690-82ca-49c7-be61-148b5faccc28How often this domain was scanned/api/v1/domain/stats/regnantitsolutions.com Scan history for this domain/api/v1/domain/history/regnantitsolutions.com?limit=15

This website contacted 11 IPs in 2 countries across 9 domains to perform 99 HTTP transactions. The main domain is regnantitsolutions.com and was registered 2 years 9 months ago.

Submitted URL: https://regnantitsolutions.com

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised 'Regnant IT Solutions' page serving a known ClickFix kit: a fake Cloudflare human-verification overlay tells visitors to open Windows Terminal and paste clipboard code, with EtherHiding blockchain-delivered next stage and CRITICAL malware IDS alerts.

Risk Factors (8)

Known malicious ClickFix Win+X overlay kit injected into the page (YARA + analyst-vetted roster)

Fake Cloudflare 'Human Verification' widget impersonating Cloudflare on a non-Cloudflare-branded site

Social-engineering instruction to open Windows Terminal and paste clipboard content (arbitrary code execution)

EtherHiding: next-stage payload address retrieved from a blockchain smart contract via obfuscated JavaScript

Multiple CRITICAL IDS malware/exploit-kit alerts on the page's own network traffic (ClickFix, EtherHiding, ErrTraffic)

Primary domain flagged as malware ('clearfake') by two independent threat feeds

Large blocks of injected, off-topic gambling/casino spam links (Vaidebet, Oceanspin, Pixbet, Ramly888, BetMGM, etc.) indicating a compromised site repurposed as a link farm

Page text addresses the visitor with anti-analysis / scare instructions ('Authorize your browser now')

Domain age information unavailable

Details

Page Title

Regnant IT Solutions

Scan Type

public

Favicon Hash

MMH3: -1850995333

MD5: 75ad393aa795194efcb9063335c732c9

Domain Name Analysis

Domain 'regnantitsolutions.com' uses the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'regnantitsolutions' spans 18 characters containing 7 vowels alongside 11 consonants. Word splitting yields three words: regnant, it, solutions. The median word length lands at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.75s

Total Load Time

1.7 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:4,683 chars

Detector Agreement:50%

Website Classification

Primary Category

entertainment media91% confidence

Type: spa

Method: ml+structural

All Detected Categories

entertainment media

91%

gambling betting

89%

technology software

87%

documentation technical

72%

cryptocurrency blockchain

57%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	199.188.206.78	United States	AS22612Namecheap, Inc.
9	142.251.20.95Google · CDN	United States	AS15169Google LLC
9	142.251.20.94Google · CDN	United States	AS15169Google LLC
9	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
9	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
99	11	-	-