Security Scan Report: rivercitymech.com

Site favicon
Submitted: Sep 23, 2026, 8:47:28 AMCompleted: Sep 23, 2026, 8:48:38 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 65%

7
Risk Score

Long-established, self-branded HVAC contractor with a single-source, unverified 'RAT malware' threat-intel match on its own domain; no phishing or credential-harvesting behavior observed. Treat as a possible false positive but verify.

Risk Factors (2)
Content-malware threat-intelligence match (RAT) on the primary domain
Domain is not present in Cisco Umbrella top 1M ranking
Domain age information unavailable

Details

Page Title

Home - River City Mechanical

Scan Type

public

Domain Name Analysis

You're looking at domain 'rivercitymech.com' on the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'rivercitymech' spans 13 characters split between four vowels and 9 consonants. Breaking it apart gives 4 words: river, city, me, ch. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rivercitymech.com

Page Load Overview

15.81s
Total Load Time
22.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,423 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning85% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
85%
corporate business
83%
healthcare medical
83%
download file sharing
82%
cryptocurrency blockchain
76%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22151.101.66.159Fastly · CDNUnited States
AS54113Fastly, Inc.
4142.250.154.95Google · CDNUnited States
AS15169Google LLC
4142.251.13.97Google · CDNUnited States
AS15169Google LLC
468.70.204.1Switzerland
AS44239proinity GmbH
4142.251.20.95Google · CDNUnited States
AS15169Google LLC
4142.251.110.97Google · CDNUnited States
AS15169Google LLC
4142.251.157.119Google · CDNUnited States
AS15169Google LLC
4166.62.107.204United States
AS398787GoDaddy.com, LLC
4142.251.110.94Google · CDNUnited States
AS15169Google LLC
4192.178.183.102Google · CDNUnited States
AS15169Google LLC
9820--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B52282B33709D92613B1E792B19FB35CC2AE9027D560CEC1A66E023D99F52F94063727

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:PRwqZELGtyFZp+EusC96VrWBZl8EoenTN:ZPckEVJVrWBZl8EoeTN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10812:SIIlC5EBECy3mFQaIVASAEowWESkkAQQAiKEIgTtBAiByJgyEhNBMCOPCaoxQgDIQe0BX4ChIBAISwAiAyBAZDG1OMIABAA0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:01002038100000ff
Perceptual Hash:8203b33ede0ae367
Difference Hash:c9c9cbe1e127a5b5
Wavelet Hash:2d207178391317ff
Color Hash:#93401f

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data