Security Scan Report: websiteambition.com

Site favicon
Submitted: Oct 11, 2026, 6:37:46 PMCompleted: Oct 11, 2026, 6:38:41 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised web-design site serving a ClickFix fake-verification overlay that tells Windows users to paste and run commands in Terminal; YARA-confirmed, primary domain flagged as malware by two feeds, 19 critical EtherHiding IDS alerts.

Risk Factors (5)
ClickFix social-engineering overlay directing visitors to paste and execute attacker-supplied commands in Windows Terminal/PowerShell (YARA-confirmed, roster-anchored)
Content-malware threat-intelligence match on the primary domain (multi-feed: 'clearfake' malware)
19 CRITICAL IDS alerts for ET MALWARE EtherHiding Exfil M2 (network trojan/exfiltration)
Third-party script/resource from a domain flagged as Vidar malware (data-seed-prebsc-1-s1.bnbchain.org)
Legitimate-looking web design content used as a lure layer over the injected malicious overlay
Domain age information unavailable

Details

Page Title

Website Design & Development Services for Growing Businesses | Website Ambition

Scan Type

public

Domain Name Analysis

The domain name 'websiteambition.com' uses the commercial generic top-level domain (.com). Its registrable label 'websiteambition' stretches across 15 characters holding 7 vowels versus 8 consonants. Segmentation suggests two words: website, ambition. Median word length is 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://websiteambition.com

Page Load Overview

2.06s
Total Load Time
3.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:5,395 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software55% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
55%
e-commerce shopping
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6192.178.183.95Google · CDNUnited States
AS15169Google LLC
6142.251.110.97Google · CDNUnited States
AS15169Google LLC
6216.198.53.3Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
6142.251.110.94Google · CDNUnited States
AS15169Google LLC
6216.198.54.6Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
6188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
615.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
6216.198.54.3Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
6216.198.53.6Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
8413--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E163C7213204153D652BCB94F794B33C616AD245D72B512DF2BC01BAA7C3ED9AD33AE8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:kL0rGV4xksc64Jysq7vzuYFYrY47GwKrt9WfYpYsYNthY70XOX1XRXtYt+9Ekyld:kLebx/c64Jysq7vKIRdCjkA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:71842:IjBmhAYcAJQjui4EJi6gCFAYhEgIAGJoUiATwQBMSAhTwRJjJAgnhAAIDmMAAHSwiAHJoAQIRARkTCA/F4gAR3RZQAwcQBGg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0008080000ffff
Perceptual Hash:984ef126b8c7b8c6
Difference Hash:69f77979353dcc18
Wavelet Hash:ff011d091000ffff
Color Hash:#931f8f

Scan History

Scan history not available

Unable to load historical scan data