Security Scan Report: fastairductcleaningnaples.com

Redirected to:
https://www.fastairductcleaningnaples.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 2 countries across 10 domains to perform 120 HTTP transactions. The main domain is fastairductcleaningnaples.com and was registered 1 year 7 months ago.

Submitted URL: https://fastairductcleaningnaples.com

Effective URL:
https://www.fastairductcleaningnaples.com/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Compromised WordPress site serving an injected ClickFix/EtherHiding infection: fake Cloudflare 'Human Verification' telling Windows users to paste a command into Terminal, plus a malformed loader and content-malware Indicators of Compromise on the primary domain. Do not visit or follow any on-page instructions.

Risk Factors (7)
Analyst-vetted ClickFix Win+X 'Human Verification' overlay kit injected into the page (CRITICAL, roster-anchored)
Analyst-vetted ErrTraffic/Exvicy WordPress injected loader using obfuscated Base64/XOR code executed via new Function (CRITICAL, roster-anchored)
Fake Cloudflare-branded security interstitial that instructs visitors to run a pasted command in Windows Terminal (ClickFix social engineering / malware delivery)
CRITICAL IDS alerts for EtherHiding exfiltration and ClickFix C2 domain (gateway.tenderly.co)
Content-malware Indicators of Compromise on both the scanned primary domain and the www host ('clearfake' / 'unknown loader', corroborated by multiple feeds)
Blockchain RPC / EtherHiding exfiltration traffic from page scripts
Site appears to be a compromised WordPress install repurposed as a malware distribution lure
Domain age information unavailable

Details

Page Title

Naples FL Air Duct Cleaning Done Right

Scan Type

public

Domain Name Analysis

Domain 'fastairductcleaningnaples.com' uses the commercial generic top-level domain (.com) with no subdomain. The core label 'fastairductcleaningnaples' covers 25 characters split between nine vowels and 16 consonants. Segmentation suggests 5 words: fast, air, duct, cleaning, naples. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fastairductcleaningnaples.com

Page Load Overview

15.45s
Total Load Time
3.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,887 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical59% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
59%
government public service
57%
real estate property
41%
healthcare medical
33%
adult content
27%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10132.148.181.92United States
AS398101GoDaddy.com, LLC
103.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
10172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
1035.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
10104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
103.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
10104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1035.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
12012--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T149843960398A1836226F42CF9023270C64CBDFF6C55195EAF5FF1124A7F6D907AA32B5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:8hvTvnB4uSOX0J4WlH14F57rekHBBOBq+7ktb2zPsuLp9N90pSfXdLvjGrRm4:8hvTB4uqJ4WlV4F57rBBF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:374930:AsSCk0KTBAQJDkgMFQAAhxAA03wDpCRlASBJ5HbQSkCq4IAQWDcQDAiE5iYJywbpMGARWhSClQSIAW6FNgEYFAyTBSoAIA4h

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0001010101010101
Perceptual Hash:aa5555557755dc80
Difference Hash:0001010909010101
Wavelet Hash:323313032f3f0f0f
Color Hash:#ac5365

Other Hashes

Crop Resistant:0001010909010101

Scan History

Scan history not available

Unable to load historical scan data