Security Scan Report: limitlessroofingsolutions.co.uk

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 3 countries across 6 domains to perform 40 HTTP transactions. The main domain is limitlessroofingsolutions.co.uk and was registered 2 years 9 months ago.

Submitted URL: https://limitlessroofingsolutions.co.uk

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Compromised roofing site serving the ClearFake/EtherHiding kit: fake Cloudflare 'I'm not a robot' lure that copies a cmd.exe/curl shell command to the clipboard (ClickFix) and pulls second-stage payloads from a Polygon smart contract. Malware delivery — do not interact.

Risk Factors (7)
Known malicious kit (ClearFake / EtherHiding Polygon loader) identified by analyst-vetted roster and YARA
Clipboard-based shell command injection (ClickFix) delivering a second-stage payload
Fake Cloudflare human-verification overlay impersonating Cloudflare's brand
CRITICAL network IDS alerts for EtherHiding exfiltration
Blockchain RPC connections (polygon.drpc.org) used to retrieve malicious infrastructure
DevTools / right-click blocking and anti-analysis techniques
Injected casino/gambling SEO spam content indicating a compromised host
Domain age information unavailable

Details

Page Title

Limitless Roofing Solutions

Scan Type

public

Domain Name Analysis

Domain 'limitlessroofingsolutions.co.uk' uses the United Kingdom country-code top-level domain (.co.uk) while skipping any subdomain. Its registrable label 'limitlessroofingsolutions' stretches across 25 characters containing ten vowels alongside 15 consonants. Breaking it apart gives three words: limitless, roofing, solutions. Median word length is 9 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://limitlessroofingsolutions.co.uk

Page Load Overview

1.72s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-GB
Text Length:16,463 chars
Detector Agreement:50%

Website Classification

Primary Category

documentation technical31% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
31%
government public service
31%
real estate property
26%
news/blog
20%

Detected Features

OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1046.30.215.12Copenhagen, Capital Region, Denmark
AS51468One.com A/S
5104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
5172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.26.2.155Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.127.138Google · CDNUnited States
AS15169Google LLC
5142.251.13.132Google · CDNUnited States
AS15169Google LLC
407--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T181B47D238D811C358B23774AB5DC2FDC303E83D7644645DD762E93E99BD9AAA90E438C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:/69A9wZH6O9/G0fj5M2EFK2SOH6O9/G0fj5M2EFLFOAR9EfXlWoKnWcH:i2Oz5M2EFKpOz5M2EF8Plbk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:530416:AkQg2ChKKDuUASBA0xCAKBBhIaCLYhewBImgMMQEQAAWhBpKwAGYAKBC5GIuXVICgZIYQwNQIEaEQJBBjBBWCANExKQgAhAk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c3c7c3fffffff7
Perceptual Hash:b03066cfce88c9cf
Difference Hash:0c1c161e00000008
Wavelet Hash:3f0303033f3fff00
Color Hash:#786a3a

Other Hashes

Crop Resistant:0c1c161e00000008

Scan History

Scan history not available

Unable to load historical scan data