ScanMalware.com

Security Scan Report: danialterations.com

Site favicon
Submitted: Oct 14, 2026, 8:42:03 PMCompleted: Oct 14, 2026, 8:42:41 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Legit tailoring site whose pages have been compromised and inject the ClearFake blockchain-contract loader (EtherHiding); threat-intel and analyst-vetted kit roster confirm malware distribution. Do not browse.

Risk Factors (4)
Compromised legitimate site injecting a known ClearFake blockchain-contract loader
Injected obfuscated JavaScript whose decoded payload contacts public RPC nodes for EtherHiding command retrieval
Content-injection spam (foreign-language online casino text) spliced into the legitimate tailoring copy, indicating unauthorised modification of the site
Threat-intelligence feeds classify the primary domain as clearfake malware
Domain age information unavailable

Details

Page Title

Dani NY Alterations – Alterations Specialists

Scan Type

public

Domain Name Analysis

Domain 'danialterations.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'danialterations' stretches across 15 characters split between seven vowels and 8 consonants. Splitting it apart reveals 2 words: dani, alterations. Expect 7.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://danialterations.com

Page Load Overview

3.76s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:11,205 chars
Detector Agreement:75%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
950.87.253.110Phoenix, Arizona, United States
AS46606Unified Layer
3192.178.183.95Google · CDNUnited States
AS15169Google LLC
3142.251.13.94Google · CDNUnited States
AS15169Google LLC
3104.21.42.198Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.110.101Google · CDNUnited States
AS15169Google LLC
3142.251.152.119Google · CDNUnited States
AS15169Google LLC
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.165.144Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.110.102Google · CDNUnited States
AS15169Google LLC
3142.251.151.119Google · CDNUnited States
AS15169Google LLC
3610--

Detected Technologies6

WordPressv7.0.7
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
Bluehost
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T150D33B7262411D3DEF6FA395B4617A289773C7C0CF0246E4F2FED21887C5AC616A229D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Pl9NNtAh9ZyBFlZmrnIa9/E/zlb3fz8m9OWqZUkUOjLx27Wdiu54:PlQh9Szlb3fzL9nq+V

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:142241:zkFFggKgAIAQIEZQIFEQIJAyMDFAFIBFQUSEEgSjAYQIkhqWQoAhDAajFjYwAhbgFgITgOG42IzTCgAFSAOAIUCooFiBAEBh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffff8183cf
Perceptual Hash:bdc31d3dc23d2c82
Difference Hash:0002000800271f36
Wavelet Hash:bec0ffe7e6808082
Color Hash:#6fac53

Other Hashes

Crop Resistant:0002000800271f36

Scan History

Scan history not available

Unable to load historical scan data