Security Scan Report: calgarypargingservices.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 19 IPs in 3 countries across 14 domains to perform 78 HTTP transactions. The main domain is calgarypargingservices.com and was registered 8 months ago.

Submitted URL: https://calgarypargingservices.com/

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate Calgary stucco site compromised: injected ClickFix/EtherHiding kit (roster-anchored CRITICAL YARA) pushes a fake Cloudflare 'Human Verification' that tricks Windows users into running a blockchain-loaded payload. Do not interact.

Risk Factors (5)
Known malicious ClickFix/EtherHiding kit injected into a legitimate-looking business page
CRITICAL YARA match for packed contract loader
4 CRITICAL network IDS alerts (EtherHiding exfiltration)
Blockchain RPC / smart-contract lookups used for next-stage payload retrieval
Obfuscated script concealing threat-feed hosts and loading content from voidravenstorm.top (3-feeds malicious)
Domain age information unavailable

Details

Page Title

Calgary Parging Services – Calgary Parging Services

Scan Type

public

Domain Name Analysis

The domain name 'calgarypargingservices.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'calgarypargingservices' is 22 characters long with seven vowels and 15 consonants. Tokenizing the label suggests five words: calgary, par, g, ing, services. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://calgarypargingservices.com/

Page Load Overview

1.90s
Total Load Time
12.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:10,922 chars
Detector Agreement:100%

Website Classification

Primary Category

real estate property73% confidence
Type: spa
Method: ml+structural

All Detected Categories

real estate property
73%
documentation technical
73%
government public service
67%
technology software
59%
adult content
49%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6141.193.213.11Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
4142.251.14.95Google · CDNUnited States
AS15169Google LLC
4142.251.14.97Google · CDNUnited States
AS15169Google LLC
4172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
4104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
435.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
4146.19.24.104Poland
AS201814MEVSPACE sp. z o.o.
4142.251.154.119Google · CDNUnited States
AS15169Google LLC
7819--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C2545C112375A17DB005AAFCA2637B3061825492B60BC4F9E7F5184ED7CC89C1E76AFB

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:YCt5UOypaXqmXK+XR21306gG2IMzIivExqQdda6s9BXqFD4ve8eZL3T/yd/ITtjh:knA/kxqQds6WZTX2f2VSxlu40PU7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:279900:RhAgigIjCgAk0ZIQpGq4gApgDwdEUmEkQABaoBwMBBRmyKUFILQcWk4KICjFBBKQwCuaVWJOIKkAxJEBRAQESLIlIEhV0AMJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff042e0e0e0e0e04
Perceptual Hash:92e96dccec91c893
Difference Hash:63dcd8dcdcdcdcdc
Wavelet Hash:ff2c2e2e0e2e0e0e
Color Hash:#532dd2

Scan History

Scan history not available

Unable to load historical scan data