Security Scan Report: dryerventandductcleaningorlando.com

Site favicon
Submitted: Oct 9, 2026, 10:02:02 AMCompleted: Oct 9, 2026, 10:03:01 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

Legitimate Orlando dryer-vent cleaning site compromised with a ClickFix kit: a fake Cloudflare 'Human Verification' overlay tells visitors to paste attacker PowerShell (Win+X, Ctrl+V, Enter). CRITICAL YARA + 4 CRITICAL IDS malware alerts.

Risk Factors (5)
Injected ClickFix (Win+X → Terminal) malware overlay masquerading as a Cloudflare 'Human Verification' challenge
CRITICAL YARA malware-rule match on page HTML (roster-anchored known kit family clickfix-winx-overlay-2026-10)
Four CRITICAL IDS alerts including ET MALWARE network-trojan signatures and EtherHiding exfiltration
Page scripts contact blockchain RPC / third-party IoC domains (tenderly.co gateway, blastapi.io, checkyoubrowse.codes)
Overlay attempts to talk the visitor into pasting and executing attacker-supplied commands (PowerShell) — direct code-execution lure
Domain age information unavailable

Details

Page Title

Orlando Dryer Vent Cleaning | DryerVentz Cleaning Orlando FL

Scan Type

public

Domain Name Analysis

The domain name 'dryerventandductcleaningorlando.com' uses the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'dryerventandductcleaningorlando' spans 31 characters containing ten vowels alongside 21 consonants. It segments into 6 words: dryer, vent, and, duct, cleaning, orlando. Expect 4.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dryerventandductcleaningorlando.com

Page Load Overview

4.96s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,358 chars
Detector Agreement:80%

Website Classification

Primary Category

government public service51% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
51%
documentation technical
43%
corporate
35%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10157.245.248.229North Bergen, New Jersey, United States
AS14061DigitalOcean, LLC
2172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
252.222.214.117Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2142.251.110.97Google · CDNUnited States
AS15169Google LLC
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
2172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23.171.214.44Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2104.20.42.169Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
237.19.194.80Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
8840--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18214E85F973A3036701346C5B4927728165DC133DD2359FAF6AA69A8CBC28E7017A32E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:wyapkCep72fLDlW1UOqnZGZbmG2LnxlZxOFSzgzob8/gyk6zMZyDd2Wwh8x46/I2:wlJL1VnZGZbmG2LnDIx46I1BSvooD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:196463:tUCLZJHDA4nkBUAEEHOxgKCMjhAggAAJEdBEChVEAKMFACFQ7UARgjAMH4BClCMlQOEiCgcgmGgJFMkihi4QSQvBWCSiYAFA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000000000ffff
Perceptual Hash:aa6ad418a5ae92fc
Difference Hash:2a9b696b57d13308
Wavelet Hash:ffff00000000ffff
Color Hash:#ac536b

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data