ScanMalware.com

Security Scan Report: welshmore.co.za

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/285068f9-37a5-4e88-a6a7-5e5cc0574c50Domain and IP registration (RDAP)/api/v1/rdap/285068f9-37a5-4e88-a6a7-5e5cc0574c50How often this domain was scanned/api/v1/domain/stats/welshmore.co.zaScan history for this domain/api/v1/domain/history/welshmore.co.za?limit=15
This website contacted 6 IPs in 2 countries across 5 domains to perform 8 HTTP transactions. The main domain is welshmore.co.za and was registered 8 months ago.

Submitted URL: https://welshmore.co.za/zoom/Iphone/invite.php/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Page impersonates Zoom on a non-Zoom domain and asks for an email password, indicating a credential phishing attempt.

Risk Factors (4)
Brand impersonation of Zoom on a non-Zoom domain
Credential-harvesting form requesting an email password
Deceptive compatibility message designed to make users proceed with login
Form action is a local PHP endpoint, not an official Zoom service
Domain age information unavailable

Details

Page Title

Zoom Client Update

Scan Type

public

Domain Name Analysis

You're looking at domain 'welshmore.co.za' on the South African country-code top-level domain (.co.za) without a subdomain. Count 9 characters in 'welshmore' split between three vowels and 6 consonants. Word splitting yields 2 words: welsh, more. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

zoom Login to join your meeting Email address Email password

Page Load Overview

0.96s
Total Load Time
104 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:230 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software74% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
74%
documentation technical
49%
download file sharing
46%
government public service
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3160.119.252.27Cape Town, Western Cape, South Africa
AS328364Host Africa (Pty) Ltd
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
1185.15.59.240United States
AS14907Wikimedia Foundation Inc.
1142.251.150.7Google · CDNUnited States
AS15169Google LLC
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
1142.251.157.7Google · CDNUnited States
AS15169Google LLC
86--

Detected Technologies5

PasswordField
100%
LiteSpeed
50%
Nginx
40%
Litespeed Cache
40%
HTTP/3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E4B1A54BA56B041AA603D1A437F27B0831A5D4135A0AEE6A3FAC015DCFC5ECD99E73DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:nBro/O3V1dhITFXHlgeSdsP31oQr1yuadAdi0nHuVeU1SiIizPi1iAkS8iQijm:Bro/O3V1dqTFXHTSb815OQU4iIizPi1E

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5380:AKSAGAwABIAAIFBEACRDoqwIgAKBIBBQABQBgUC4AgLQpWoGCEWaAEIiEEikERCCgDUBcEogGABoAREAAAoAIEAgjChIgkRZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7e7ffff
Perceptual Hash:b38ccc3333cc6633
Difference Hash:001008084c4c3008
Wavelet Hash:cfcfc7c703030303
Color Hash:N/A

Other Hashes

Crop Resistant:001008084c4c3008

Scan History

Scan history not available

Unable to load historical scan data