Security Report: heatingsolutionsni.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/98e93f33-2114-4aab-b9ac-154993dfdbf5 Domain and IP registration (RDAP)/api/v1/rdap/98e93f33-2114-4aab-b9ac-154993dfdbf5 Certificate Transparency/api/v1/ct/heatingsolutionsni.com How often this domain was scanned/api/v1/domain/stats/heatingsolutionsni.com Scan history for this domain/api/v1/domain/history/heatingsolutionsni.com?limit=15

This website contacted 21 IPs in 3 countries across 17 domains to perform 87 HTTP transactions. The main domain is heatingsolutionsni.com and was registered 5 years ago.

Submitted URL: https://heatingsolutionsni.com/

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Compromised heating-business site serving an analyst-confirmed ClickFix WinX overlay: fake Cloudflare verification pushes visitors to paste malware in Terminal, with EtherHiding exfil and multi-feed malware Components of Compromise.

Risk Factors (5)

Injected fake Cloudflare 'Human Verification' overlay (ClickFix) telling users to run a copied command in Windows Terminal

EtherHiding malware exfiltration alert (ET MALWARE EtherHiding Exfil M2) and blockchain RPC calls used to fetch a second-stage payload

Known-malicious kit roster match for family clickfix-winx-overlay-2026-10

Multi-feed threat-intel Components of Compromise on the primary domain and URL

Legitimate heating business site appears compromised and is serving attacker-controlled content

Domain age information unavailable

Details

Page Title

Boiler Repair Belfast | Heating & Plumbing Solutions NI Belfast Heating

Scan Type

public

Favicon Hash

MMH3: 2071267161

MD5: 886a60145a7b5c3e660677742e6d7326

Domain Name Analysis

Domain 'heatingsolutionsni.com' uses the commercial generic top-level domain (.com) without a subdomain. The second-level label 'heatingsolutionsni' is 18 characters long with eight vowels and 10 consonants. Word splitting yields three words: heating, solutions, ni. Median word length comes out to 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.48s

Total Load Time

3.2 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:3,274 chars

Detector Agreement:80%

Website Classification

Primary Category

corporate50% confidence

Type: spa

Method: structural

All Detected Categories

corporate

50%

news/blog

40%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	72.61.203.68	Manchester, England, United Kingdom	AS47583Hostinger International Limited
4	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.21.27.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	192.178.170.95Google · CDN	United States	AS15169Google LLC
4	172.67.71.102Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.14.97Google · CDN	United States	AS15169Google LLC
4	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
4	142.251.110.94Google · CDN	United States	AS15169Google LLC
4	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
4	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
87	21	-	-