Security Scan Report: americandreamlost.com

Site favicon
Submitted: Sep 14, 2026, 4:47:51 AMCompleted: Sep 14, 2026, 4:48:58 AMpubliccompleted

Summary

This website contacted 18 IPs in 3 countries across 10 domains to perform 1 HTTP transaction. The main domain is americandreamlost.com and was registered 18 years ago.

Submitted URL: https://americandreamlost.com

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Compromised legitimate site now serving a ClearFake/ClickFix FakeCAPTCHA that copies a Windows shell command to the clipboard to execute malware. Multiple Indicators of Compromise, YARA, and IDS hits confirm malware delivery.

Risk Factors
Known ClickFix FakeCAPTCHA malware kit delivered from the page
Clipboard hijacking that stages a Windows shell/LOLBin command for the victim to paste and run (Win+R lure)
EtherHiding malware exfiltration via blockchain RPC endpoints
Two third-party resources on the page independently reported as ClearFake / malicious host by multiple threat-intel feeds
Heavy obfuscated JavaScript with 681 eval() calls
Compromised legitimate domain serving an injected malicious payload
Domain age information unavailable

Details

Page Title

American Dream Lost – Assisting victims of the legal system

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

adult content

(36%)

Domain Information

Within the commercial generic top-level domain (.com), 'americandreamlost.com' is registered and has no subdomain. Count 17 characters in 'americandreamlost' holding 7 vowels versus ten consonants. Breaking it apart gives 3 words: american, dream, lost. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://americandreamlost.com

Page Load Overview

12.41s
Total Load Time
243
HTTP Requests
10
Domains
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:59 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content36% confidence
Type: static
Method: ml+structural

All Detected Categories

adult content
36%
government public service
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22192.178.183.95Google · CDNUnited States
AS15169Google LLC
13104.244.124.24United States
AS22611InMotion Hosting, Inc.
13194.33.35.51Amsterdam, North Holland, Netherlands
AS210644Aeza Group LLC
13104.18.23.83Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1378.40.198.82United Arab Emirates
AS216071Servers Tech Fzco
13104.21.3.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13142.251.13.95Google · CDNUnited States
AS15169Google LLC
13142.251.156.4Google · CDNUnited States
AS15169Google LLC
13142.251.152.4Google · CDNUnited States
AS15169Google LLC
13104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
24318--

Page Statistics

243
Requests
10
Unique Domains
6.0 MB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A17194773A49980A19E204F3F56FBB0D7E2A510751C9AD72C989E9B42538FE5C0B7C09

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:jzIXWEXYDRODEKxVKqRLbUI2UIjHE5aw0ftS6/ZKd5VRIvpJ+kkk2SmMUmlmMUmc:jUXWjDRODESVLRLms0ftTifiZtgzV1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3553:wAwggQBAECAAApSABECGBMAREgGACCEACIgBIAoAABABkASACIAYIAAAQxCAAYEgADAAAkwlEIAZAAIBhCBAAAQgIQiACAGg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc3c7ffffffffe7
Perceptual Hash:b03032cdc7cdcecc
Difference Hash:181e1c100000000c
Wavelet Hash:3f03070f3c3c3c00
Color Hash:#2dd2d0

Other Hashes

Crop Resistant:181e1c100000000c

Scan History

Scan history not available

Unable to load historical scan data