Security Scan Report: laboriewines.co.za

Site favicon
Submitted: Sep 19, 2026, 4:47:27 AMCompleted: Sep 19, 2026, 4:48:22 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 85%

9
Risk Score

Legitimate 16-year-old Laborie Wines site appears compromised: page loads blockchain RPC nodes and malicious clearfake domains and triggers six CRITICAL EtherHiding malware/C2 IDS alerts. Do not interact.

Risk Factors
Critical IDS malware/C2 alerts (EtherHiding exfiltration) on a page with no legitimate need for blockchain RPC
Loads multiple corroborated-malicious external domains (clearfake/exploit-kit infrastructure)
Obfuscated code generation (Function() constructor) in page script
Threat-intel match on the primary domain ('unknown loader')
Domain age information unavailable

Details

Page Title

Laborie - Producing unique wines for more than 300 years

Scan Type

public

Domain Name Analysis

Within the South African country-code top-level domain (.co.za), 'laboriewines.co.za' is registered. Count 12 characters in 'laboriewines' split between 6 vowels and 6 consonants. Word splitting yields 3 words: labor, ie, wines. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://laboriewines.co.za

Page Load Overview

17.05s
Total Load Time
13.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:4,923 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content65% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
65%
blog personal website
61%
e-commerce shopping
50%
government public service
39%
education learning
35%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15129.232.249.99Johannesburg, Gauteng, South Africa
AS37153Xneelo (Pty) Ltd
9142.251.13.97Google · CDNUnited States
AS15169Google LLC
9216.239.34.36Google · CDNUnited States
AS15169Google LLC
9188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9132.145.155.63Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
9104.18.11.59Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9158.94.208.87Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
9142.251.153.4Google · CDNUnited States
AS15169Google LLC
11412--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BBD2F9B1E15D40573B5F739CC296322DD42CA333E901AB76B8F4B49859A49BE00A763F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:+EMnwKj3eSlSgFV0oPgwr/ZdSZUaAhHkW6PAa5R:Cn/eoF2oPNZdypa96PAa5R

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28789:GtIpmpAjhKqzKCBBANAgXBmMBDBU4gCCwGmkAGKKEQCUJoAifCorcREISA4SBEEC5MEDKWjCISE0SzQBBUgXRhAACgAgAZAi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9e9e9f9f9fbfffff
Perceptual Hash:9e1fc1c115e1e13e
Difference Hash:6020202020200000
Wavelet Hash:b292929292b2f2f2
Color Hash:#863a2d

Other Hashes

Crop Resistant:6020202020200000

Scan History

Scan history not available

Unable to load historical scan data