Security Scan: Total Plumbing Solutions

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fb6c839a-d95d-4974-9e90-93aaaeed74a1 Domain and IP registration (RDAP)/api/v1/rdap/fb6c839a-d95d-4974-9e90-93aaaeed74a1How often this domain was scanned/api/v1/domain/stats/totalplumbingfl.com Scan history for this domain/api/v1/domain/history/totalplumbingfl.com?limit=15

This website contacted 25 IPs in 2 countries across 13 domains to perform 144 HTTP transactions. The main domain is totalplumbingfl.com and was registered 14 years ago.

Submitted URL: https://totalplumbingfl.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate plumbing site compromised with a ClickFix Win+X/Terminal overlay kit impersonating a Cloudflare check; EtherHiding blockchain C2 and flagged loader/malware IoCs confirm active malware delivery.

Risk Factors (5)

ClickFix Win+X/Terminal overlay kit injected into page (analyst-vetted malicious kit, CRITICAL YARA hit)

Impersonates a Cloudflare connection-security check to social-engineer code execution

CRITICAL IDS alert for EtherHiding exfiltration plus blockchain RPC and Ethereum contract calls

Primary domain flagged as an unknown malware loader

Malicious third-party resources loaded by the page (checkyoubrowse.codes, 178.16.52.101:443 'ek clearfake')

Domain age information unavailable

Details

Page Title

Total Plumbing Solutions

Scan Type

public

Favicon Hash

MMH3: -165621146

MD5: 9a5c868b1d5329f71ff9fa38bf7bb976

Domain Name Analysis

The domain 'totalplumbingfl.com' uses the commercial generic top-level domain (.com) without a subdomain. Count 15 characters in 'totalplumbingfl' with four vowels and 11 consonants. Segmentation suggests 3 words: total, plumbing, fl. Median word length comes out to five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

14.15s

Total Load Time

7.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:9,909 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical55% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

55%

government public service

45%

forum

20%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
24	199.189.225.135	United States	AS32244Liquid Web, L.L.C
5	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.250.154.95Google · CDN	United States	AS15169Google LLC
5	172.217.119.4Google · CDN	United States	AS15169Google LLC
5	142.251.110.97Google · CDN	United States	AS15169Google LLC
5	142.251.157.119Google · CDN	United States	AS15169Google LLC
5	99.84.152.37Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
5	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
5	142.250.154.94Google · CDN	United States	AS15169Google LLC
5	142.251.20.94Google · CDN	United States	AS15169Google LLC
144	25	-	-