Security Scan Report: softroofwashing.com.au

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 4 countries across 5 domains to perform 72 HTTP transactions. The main domain is softroofwashing.com.au.

Submitted URL: https://softroofwashing.com.au

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Legitimate-looking roof-washing WordPress site that is compromised: injected ClickFix overlay loads second-stage malware via blockchain EtherHiding, confirmed by CRITICAL IDS alerts and kit-roster match. Avoid.

Risk Factors (5)
Injected ClickFix-style fake 'Human Verification' overlay delivering a Win+X/Terminal payload to Windows visitors
EtherHiding: malware loader fetches stage-two address from a Polygon smart contract via public blockchain RPC endpoints
Obfuscated JavaScript concealing communication with multiple flagged blockchain/RPC hosts
Two CRITICAL IDS alerts: exploit-kit check-in traffic and malware exfiltration
Unauthorized gambling SEO spam injected into otherwise unrelated legitimate business pages
Domain age information unavailable

Details

Page Title

Home - Soft Roof Washing

Scan Type

public

Domain Name Analysis

The domain name 'softroofwashing.com.au' uses the Australian country-code top-level domain (.com.au) with no subdomain. Its registrable label 'softroofwashing' stretches across 15 characters containing 5 vowels alongside ten consonants. Breaking it apart gives three words: soft, roof, washing. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://softroofwashing.com.au

Page Load Overview

8.32s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,460 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical58% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
58%
corporate business
37%
real estate property
30%
technology software
29%
forum
25%

Detected Features

Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12103.254.137.169Australia
AS38719Dreamscape Networks Limited
10192.178.183.95Google · CDNUnited States
AS15169Google LLC
1064.130.32.46Frankfurt am Main, Hesse, Germany
AS20326TeraSwitch Networks Inc.
1031.77.16.64Amsterdam, North Holland, Netherlands
10142.251.20.94Google · CDNUnited States
AS15169Google LLC
10192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
10208.115.201.238Frankfurt am Main, Hesse, Germany
AS46475Limestone Networks, Inc.
727--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12A5408B6BB539068342F06EFD523354D308DD8FAD925A5E6F2BE4221D3B2DC03BA5550

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:KjJ4eaNK2eXwefO/Jel87/L5GWx09sxjC9ID/Gy0BejshsEh:Nw24wefO/Jel87/osEh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:304738:IiUKYhaGGiQKSFOqJ5fNIAJgwFyCl4jOZ0xB8PBEWsJCA6xAjNqKQgRQZAwIhQEAg4gmhMApQEhK0OQIDBmMlNCmRNUmiUEI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7c3c3fffffff7
Perceptual Hash:b030a3c7cecccccd
Difference Hash:0c1c163600000008
Wavelet Hash:fcc4c0c03c3cff00
Color Hash:#d22d9b

Other Hashes

Crop Resistant:0c1c163600000008

Scan History

Scan history not available

Unable to load historical scan data