Security Scan: Balcony Inspection Los Angeles

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f3f9f208-8bfe-4df7-bcc4-2efd64fcf271 Domain and IP registration (RDAP)/api/v1/rdap/f3f9f208-8bfe-4df7-bcc4-2efd64fcf271How often this domain was scanned/api/v1/domain/stats/balconyinspectionlosangeles.com Scan history for this domain/api/v1/domain/history/balconyinspectionlosangeles.com?limit=15

This website contacted 14 IPs in 3 countries across 10 domains to perform 27 HTTP transactions. The main domain is balconyinspectionlosangeles.com and was registered 8 months ago.

Submitted URL: https://balconyinspectionlosangeles.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised balcony-inspection site now serving a CRITICAL ClickFix Win+X/Terminal overlay driven by an EtherHiding blockchain payload loader, confirmed by analyst-vetted kit roster, YARA and 20 CRITICAL IDS alerts.

Risk Factors (6)

Known ClickFix malware/phishing kit injected into a legitimate-themed business page

CRITICAL YARA matches for ClickFix Win+X Terminal overlay and packed blockchain contract loader

EtherHiding: script retrieves next-stage payload host from a Polygon smart contract

Multiple CRITICAL IDS alerts (EtherHiding exfiltration, ClickFix C2 domain, exploit-kit activity)

Multi-source threat-intel match on the primary domain (malicious 'clearfake')

Obfuscated script hides threat-feed RPC hosts only revealed after decoding

Domain age information unavailable

Details

Page Title

Balcony Inspection Los Angeles

Scan Type

public

Favicon Hash

MMH3: -983050240

MD5: 4d6fd0f442fd8bd0456b74bdb96c1899

Domain Name Analysis

The domain 'balconyinspectionlosangeles.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Count 27 characters in 'balconyinspectionlosangeles' holding ten vowels versus 17 consonants. Splitting it apart reveals 4 words: balcony, inspection, los, angeles. Average segment length settles at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.96s

Total Load Time

1.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:8,449 chars

Detector Agreement:100%

Website Classification

Primary Category

real estate property79% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

real estate property

79%

government public service

55%

news/blog

20%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	50.6.43.22	Mumbai, Maharashtra, India	AS31898Oracle Corporation
1	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
1	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	142.251.13.94Google · CDN	United States	AS15169Google LLC
1	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
1	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	192.178.183.95Google · CDN	United States	AS15169Google LLC
27	14	-	-