Security Scan Report: wealthywealth.co.za

Site favicon
Submitted: Oct 12, 2026, 1:58:05 AMCompleted: Oct 12, 2026, 1:58:44 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Analyst-vetted ClickFix FakeCAPTCHA (LOLBin) kit matched on this page, and threat intel flags its own primary domain as 'iclickfix (malware)'. A polished 'investment' veneer hides a fake-CAPTCHA page designed to make visitors run a malicious Windows command.

Risk Factors (4)
Known malicious kit identified by analyst-vetted roster: ClickFix FakeCAPTCHA (LOLBin variant) — critical phishing/malware-delivery kit
Threat-intel IoC names the page's primary domain as 'iclickfix (malware)'
Domain not ranked in Cisco Umbrella top 1M and low business-legitimacy score (20/100) despite investment/finance branding
Content classifier flags adult-content category (weak, low-signal)
Domain age information unavailable

Details

Page Title

Wealthy Wealth – Invest with us

Scan Type

public

Domain Name Analysis

The domain 'wealthywealth.co.za' uses the South African country-code top-level domain (.co.za) while skipping any subdomain. The registrable portion 'wealthywealth' spans 13 characters with four vowels and nine consonants. Splitting it apart reveals two words: wealthy, wealth. Expect 6.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://wealthywealth.co.za

Page Load Overview

4.96s
Total Load Time
412 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:5,954 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content28% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

adult content
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4102.218.215.27South Africa
AS329184Host Africa (Pty) Ltd
4192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
4104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
452.63.121.74Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
4142.251.156.119Google · CDNUnited States
AS15169Google LLC
4142.251.14.104Google · CDNUnited States
AS15169Google LLC
246--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13083F961D7AC00B666A703ED696DA70DE137D8F0CA0981FBF0FFE25823C49D945A3619

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:p7ypbp1N541GPTu6qqxaJMVdLoY3mUTtTZc6R0LYv:pGJp1N5pPTu6qqxaGV5oY3BTtTZc6iL8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:83609:BjDKGAgGAgI4VBA1FpRMVqUMQCAkDhhUA1kXDEAYJpCIAAL4U60CSVBYgykBAUwRKJxXZUDwQRFgkDEgTAQkVjAhaiwoWIhK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000001810005fff
Perceptual Hash:980fa770cd19cf64
Difference Hash:d1edf9f0b1b5b9cf
Wavelet Hash:00003c3cdd0cffff
Color Hash:#865c2d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data