ScanMalware.com

Security Scan Report: funktionflooring.co.za

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/01250a5c-2e28-4505-b6b7-005b457babdcDomain and IP registration (RDAP)/api/v1/rdap/01250a5c-2e28-4505-b6b7-005b457babdcHow often this domain was scanned/api/v1/domain/stats/funktionflooring.co.zaScan history for this domain/api/v1/domain/history/funktionflooring.co.za?limit=15
This website contacted 8 IPs in 3 countries across 8 domains to perform 64 HTTP transactions. The main domain is funktionflooring.co.za and was registered 11 years ago.

Submitted URL: https://funktionflooring.co.za

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate 11-year-old flooring business whose site has been hacked: an analyst-vetted ClickFix malware kit forces a fake Cloudflare 'Human Verification' overlay (Win+X -> Terminal) and uses EtherHiding via a Polygon contract to load its next stage. Do not visit or follow any prompt on the page.

Risk Factors (5)
Compromised legitimate site: a ClickFix Win+X/Terminal malware kit is injected into the page and forces a fake 'Human Verification' overlay on visitors
EtherHiding loader pulls its next stage from a Polygon smart contract, evading takedown
Obfuscated script loads code from the unranked host browse-codes-enter.beer and contacts several blockchain RPC endpoints
Primary domain flagged as malware by two independent threat-intelligence feeds
Injected off-topic Turkish gambling SEO spam hidden on the page
Domain age information unavailable

Details

Page Title

White Flooring For Events & Parties. Event Flooring Hire. – White Flooring For Events & Parties. Event Flooring Hire

Scan Type

public

Domain Name Analysis

The domain name 'funktionflooring.co.za' uses the South African country-code top-level domain (.co.za) with no subdomain. Its registrable label 'funktionflooring' stretches across 16 characters holding 6 vowels versus 10 consonants. Segmentation suggests three words: funk, tion, flooring. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://funktionflooring.co.za

Page Load Overview

3.61s
Total Load Time
3.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:7,919 chars
Detector Agreement:75%

Website Classification

Primary Category

gambling betting26% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
26%
news/blog
20%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
841.203.16.248Johannesburg, Gauteng, South Africa
AS37153Xneelo (Pty) Ltd
8192.178.183.95Google · CDNUnited States
AS15169Google LLC
8104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
835.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
8178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
8142.250.154.94Google · CDNUnited States
AS15169Google LLC
8104.21.43.137Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
648--

Detected Technologies4

WordPressv7.0.4
100%
MetaGenerator
100%
PHP
50%
MySQL
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FBF3F833A3D50129336703ED8105BA3C9236D817FE5EAAD5F2EA849DB5D0B91723396C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:LCt5EbnAltR4AeCHf/9ChypWRTtKft+bpxkqZgAkJpY1fRMzs:Z/qwKft+nsY1f8s

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:163863:Kdhs4U0AgMgEQB8zGAElCYFAKSYhVTHCnHCAmAYdEFSnBUEAeAKABpWBqUhQwELTqBACEAyk80CwUcpbBIAwPYA2QjAAywIK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfcf3f7f7f7f7f7f
Perceptual Hash:b83838b8fc9c07c7
Difference Hash:3292c89080808080
Wavelet Hash:cf5f317131313131
Color Hash:#bbe06c

Other Hashes

Crop Resistant:3292c89080808080

Scan History

Scan history not available

Unable to load historical scan data