ScanMalware.com

Security Scan Report: eldahouara.com

Site favicon
Submitted: Oct 9, 2026, 6:22:19 PMCompleted: Oct 9, 2026, 6:22:55 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Legitimate-looking Algerian water company site has been compromised and now serves the ErrTraffic/Exvicy ClickFix kit: a fake Cloudflare 'Human Verification' overlay telling Windows users to paste commands into Terminal.

Risk Factors (5)
Compromised site injecting the ErrTraffic/Exvicy ClickFix loader
Fake Cloudflare-style Human Verification overlay pushing Win+X -> Terminal paste of attacker commands
EtherHiding (blockchain RPC) exfiltration traffic flagged by IDS
Multiple malicious third-party script/redirect domains loaded (makeverizyjar.info, checkyoubrowse.codes, lovezramexar.info, karmazarbaza.com)
15 threat-intel matches (9 multi-source corroborated) across primary domain, URL and loaded resources
Domain age information unavailable

Details

Page Title

ELDAHOUARA

Scan Type

public

Domain Name Analysis

The domain name 'eldahouara.com' uses the commercial generic top-level domain (.com). The second-level label 'eldahouara' is 10 characters long split between six vowels and four consonants. Segmentation suggests four words: el, da, hou, ara. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://eldahouara.com

Page Load Overview

1.97s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:887 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software45% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
45%
cryptocurrency blockchain
38%
documentation technical
29%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11135.181.225.133Helsinki, Uusimaa, Finland
AS24940Hetzner Online GmbH
3142.251.127.95Google · CDNUnited States
AS15169Google LLC
3188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
3104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3192.178.183.94Google · CDNUnited States
AS15169Google LLC
3158.94.211.226Rotterdam, South Holland, Netherlands
AS202412Omegatech LTD
335.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5917--

Detected Technologies6

WordPressv7.1.3
100%
MetaGenerator
100%
PHP
50%
MySQL
50%
WordPress Block Editor
30%
Kadence WP Blocks
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F4830B526360167A2C3F4FA9C09A62297649E906D60E23D6F0F6C1A170ED9D31D73B3F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:XWbH+b0HgZdypMRYT3HZtLHO6G6i6qQPbjN94R6feP0eBxipeFHlnfJ+b0vLBN8h:XajIyp5T3HZtLHn994R6feP0wFnfRNg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:83679:HcouFSoQIIemBGApkjTAJrxCIBEx41RqEgxAAqkCWMYuhiE4RulQCZg0gLBwSiAAmIaEq0FQUQ4QRSlQAMAGLRmAQmxpgEk8

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818183cffff7f04
Perceptual Hash:884c3bc7736c3476
Difference Hash:f1f1f0f0e8f0f8f9
Wavelet Hash:0018183cffff7f04
Color Hash:#3a784c

Other Hashes

Crop Resistant:b3b3b3b3b3b3b3b3,5652d56666cd9a2e,6c21392b33266ca4,f2f2e4e4f2b0f0f0,f0f0f0f0e8f0f8f8

Scan History

Scan history not available

Unable to load historical scan data