Security Scan Report: everestmart.com

Redirected to:
https://www.everestmart.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 2 countries across 14 domains to perform 288 HTTP transactions. The main domain is everestmart.com and was registered 7 years ago.

Submitted URL: https://everestmart.com

Effective URL:
https://www.everestmart.com/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Legitimate-looking grocery site whose HTML has been compromised with an analyst-vetted IClickFix/EtherHiding loader; critical IDS malware alert and multi-feed threat-intel hits. Do not browse.

Risk Factors (5)
Known malicious ClickFix/EtherHiding kit injected into the page HTML (analyst-vetted kit roster, CRITICAL)
Critical IDS malware alert for EtherHiding exfiltration
Obfuscated inline script resolving a blockchain-stored payload address (EtherHiding)
Obfuscated script concealing known-attacker RPC hosts (0xrpc.io, 1rpc.io, gateway.tenderly.co)
Multiple threat-intelligence matches on the primary domain and on a loaded third-party domain
Domain age information unavailable

Details

Page Title

Everest trading UK ltd

Scan Type

public

Domain Name Analysis

Domain 'everestmart.com' uses the commercial generic top-level domain (.com) without a subdomain. The second-level label 'everestmart' is 11 characters long split between four vowels and 7 consonants. Splitting it apart reveals 2 words: everest, mart. Average segment length settles at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://everestmart.com

Page Load Overview

24.29s
Total Load Time
37.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:8,745 chars
Detector Agreement:80%

Website Classification

Primary Category

social media network84% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
84%
e-commerce shopping
66%
government public service
36%
adult content
34%
healthcare medical
33%

Detected Features

Login Form
Search
Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22148.113.12.209Mumbai, Maharashtra, India
AS16276OVH SAS
19192.178.183.95Google · CDNUnited States
AS15169Google LLC
19142.251.20.97Google · CDNUnited States
AS15169Google LLC
19142.251.20.94Google · CDNUnited States
AS15169Google LLC
19216.239.34.36Google · CDNUnited States
AS15169Google LLC
19142.251.13.95Google · CDNUnited States
AS15169Google LLC
19142.251.110.97Google · CDNUnited States
AS15169Google LLC
19104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
19104.21.72.64Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
19142.250.154.94Google · CDNUnited States
AS15169Google LLC
28815--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B3D4F8E2F6690879116F53CF9022B79C615FEBF7DAE185E5F1B78228E2A1CD03153098

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:DfHveBLg4ioYPIIBlOZzlL6jb30xhyHwPv8CSibH/cy/+J/gUYqk3QqpW+ZOiftV:Kgk3QqFk2br

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:640545:VADQwJ9vkJCU5oiWAkBBHvCJIVAEEgETAQECAgREcGoBBDEEwAAQkBxFhLIuQAtiLBJNElklCaAEgB2/1yghKV2TDwUYECRw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff3800000030ffff
Perceptual Hash:ca09b5ce7ab30d94
Difference Hash:33f3c60365710c2b
Wavelet Hash:ff3900003030ffff
Color Hash:#bfd279

Scan History

Scan history not available

Unable to load historical scan data