Security Scan Report: updatespecialists.com

Submitted: Sep 13, 2026, 10:47:32 PMCompleted: Sep 13, 2026, 10:49:05 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Legitimate-looking 7-year-old remodeling site appears COMPROMISED: CRITICAL EtherHiding malware IDS alert, blockchain C2 RPC calls, and multi-feed malware Indicator of Compromise on loaded resource qaz0.com. Avoid.

Risk Factors
CRITICAL network IDS malware alert (EtherHiding Exfil M2)
Blockchain RPC connection consistent with blockchain-based C2 loading
Multi-source malware Indicator of Compromise on loaded resource qaz0.com
Primary domain flagged as RAT (single-source, unverified)
Domain age information unavailable

Details

Page Title

Update Specialists Inc. – Large Remodels – Additions – New Builds

Scan Type

public

Domain Name Analysis

The domain 'updatespecialists.com' uses the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'updatespecialists' spans 17 characters split between seven vowels and ten consonants. Splitting it apart reveals two words: update, specialists. Median word length comes out to 8.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://updatespecialists.com

Page Load Overview

75.17s
Total Load Time
634 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,565 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical46% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

healthcare medical
46%
entertainment media
37%
news media journalism
31%
cryptocurrency blockchain
30%
corporate business
28%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8162.241.139.58Ashburn, Virginia, United States
AS19871Network Solutions, LLC
7142.251.127.95Google · CDNUnited States
AS15169Google LLC
7192.178.183.95Google · CDNUnited States
AS15169Google LLC
7188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7192.178.183.94Google · CDNUnited States
AS15169Google LLC
436--

Detected Technologies5

WordPressv7.0.4
100%
JQueryv3.7.1
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CFC2FA7191AA10C27F1E9B6AF3E2B22C5144E9255A03BBB7B0F5315C952C9FB00E6D1F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:5dUqQm0PIlGDzHz8CMe9ihpjj25r/ZdSZUaArkWDN:5mqQmsSGDjAx+NZdypGR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26925:gMWQAIiU0OAgywRQrgBEAyEvYLIRUGilGBIFDFHZAwJMYhMDk4AOAHydADABgQXIRMDEhQJiAgCbKQECIdHBAJIJYHwNmCbQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffdfff7104000000
Perceptual Hash:b8bdf91cc644c60b
Difference Hash:3218bbaf3db493a9
Wavelet Hash:ffffff7705000000
Color Hash:#d2ae2d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data