Security Scan Report: rcrsinnovations.com

Redirected to:
https://rcrsinnovations.com/wp-content/plugins/exactmetrics-pro-2/js/b...
Submitted: Sep 12, 2026, 10:48:00 PMCompleted: Sep 12, 2026, 10:49:42 PMpubliccompleted

This website contacted 7 IPs in 1 country across 6 domains to perform 98 HTTP transactions. The main domain is rcrsinnovations.com and was registered 1 month ago.

Submitted URL: http://rcrsinnovations.com/wp-content/plugins/exactmetrics-pro-2/js/bsc-loader.js

Effective URL:

https://rcrsinnovations.com/wp-content/plugins/exactmetrics-pro-2/js/b...
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

The served JavaScript is the ClearFake/ClickFix 'bscSl' fake WordPress plugin loader hidden in exactmetrics-pro-2; a CRITICAL roster-anchored YARA hit confirms a malicious ClickFix delivery chain on this compromised site.

Risk Factors
Known malicious kit content served from a compromised WordPress install (ClearFake/ClickFix bscSl loader)
CRITICAL high-precision YARA match on the served JavaScript
Script fetches a second-stage payload and injects it into the page (EtherHiding/ClickFix delivery)
Obfuscated, dynamically generated code (Function() constructor usage)
Domain age information unavailable

Details

Page Title

Page not found – RCRS Innovations : Lithium ion battery manufacturerfrom scan record

Scan Type

public

Domain Name Analysis

The domain 'rcrsinnovations.com' uses the commercial generic top-level domain (.com). Its registrable label 'rcrsinnovations' stretches across 15 characters holding 5 vowels versus ten consonants. Word splitting yields 3 words: r, crs, innovations. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://rcrsinnovations.com/wp-content/plugins/exactmetrics-pro-2/js/bsc-loader.js

Page Load Overview

22.38s
Total Load Time
8.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,557 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog40% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
40%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14142.251.110.95Google · CDNUnited States
AS15169Google LLC
14208.91.198.178United States
AS46606Unified Layer
14172.67.221.251Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14142.251.156.119Google · CDNUnited States
AS15169Google LLC
14142.251.14.139Google · CDNUnited States
AS15169Google LLC
14142.251.110.94Google · CDNUnited States
AS15169Google LLC
14104.21.38.103Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
987--

Detected Technologies9

WordPressv6.4.2
100%
JQueryv3.7.1
100%
Bootstrapv6.4.2
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T184B092EABD9054400E8075D428E0763868061BA874829A507AC400206AA03AD1D01618

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3:PouVWJhquHbsYXMgvCRQdIlBdUBWAI9kBbZWM:h4hqIYYXbvCRdBdUgVuB9d

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:8b086f45db0ae3f2d8e7e05a35e44d1e

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffff0000
Perceptual Hash:ead52ab36a2b622a
Difference Hash:c10000000c002100
Wavelet Hash:00fefeffe6e60000
Color Hash:#79d2ad

Scan History

Scan history not available

Unable to load historical scan data