Security Scan: Private lessons are now available on Saturday

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5deb3598-fb90-4513-9b81-8b3a33e62dc1 Domain and IP registration (RDAP)/api/v1/rdap/5deb3598-fb90-4513-9b81-8b3a33e62dc1 Certificate Transparency/api/v1/ct/scanlanglass.com How often this domain was scanned/api/v1/domain/stats/scanlanglass.com Scan history for this domain/api/v1/domain/history/scanlanglass.com?limit=15

This website contacted 14 IPs in 4 countries across 10 domains to perform 51 HTTP transactions. The main domain is scanlanglass.com and was registered 26 years ago.

Submitted URL: https://scanlanglass.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Established Scanlan Glass WordPress site has been compromised and injects a CRITICAL IClickFix/EtherHiding ClickFix loader (YARA + kit roster + 3 critical IDS alerts). Malware distribution despite legit brand.

Risk Factors (5)

Known IClickFix/ClickFix EtherHiding malware injection on a legitimate-looking page

CRITICAL YARA rule and analyst-vetted kit roster match

CRITICAL IDS alerts for EtherHiding exfiltration and ClickFix C2 domain

Blockchain RPC connection to rpc.sepolia.ethpandaops.io used to retrieve encrypted second stage

Obfuscated JavaScript concealing multiple threat-feed payload hosts

Domain age information unavailable

Details

Page Title

Private lessons are now available on Saturdays. - Scanlan Glass

Scan Type

public

Favicon Hash

MMH3: 1198047028

MD5: 000bf649cc8f6bf27cfb04d1bcdcd3c7

Domain Name Analysis

You're looking at domain 'scanlanglass.com' on the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'scanlanglass' spans 12 characters holding 3 vowels versus 9 consonants. It segments into 2 words: scanlan, glass. Average segment length settles at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.91s

Total Load Time

3.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:418 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software36% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

36%

corporate

35%

education learning

27%

government public service

26%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	66.175.58.9	Canada	AS30447Internet Names For Business Inc.
3	142.251.20.95Google · CDN	United States	AS15169Google LLC
3	185.92.183.208	Riga, Riga, Latvia	AS56971Cgi Global Limited
3	142.251.13.102Google · CDN	United States	AS15169Google LLC
3	142.251.14.94Google · CDN	United States	AS15169Google LLC
3	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
3	142.251.127.84Google · CDN	United States	AS15169Google LLC
3	2.23.246.146Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
3	142.251.14.95Google · CDN	United States	AS15169Google LLC
3	104.26.13.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
51	14	-	-