Security Scan Report: artisanaquascapes.net

Site favicon
Submitted: Sep 13, 2026, 10:47:33 AMCompleted: Sep 13, 2026, 10:49:26 AMpubliccompleted

Summary

This website contacted 8 IPs in 1 country across 6 domains to perform 2 HTTP transactions. The main domain is artisanaquascapes.net and was registered 13 years ago.

Submitted URL: https://artisanaquascapes.net

AI Security Verdict

High Risk

Confidence: 95%

9
Risk Score

Multiple strong malware indicators: primary domain IoC, external malware resource, and CRITICAL IDS alert for EtherHiding exfiltration. High risk of malware distribution.

Risk Factors
Newly registered domain (89 days old)
Primary domain IoC for RAT malware
External resource IoC for malware (xaz2.com, 2 feeds)
CRITICAL IDS alert indicating malware exfiltration
EtherHiding exfiltration infrastructure present
Unranked domain with no established reputation
Domain age information unavailable

Details

Page Title

Homepage - Artisan Aquascapes

Scan Type

public

Language

馃嚭馃嚫

English

(80% confidence)

Category

government public service

(47%)

Domain Information

The domain 'artisanaquascapes.net' uses the network infrastructure generic top-level domain (.net) without a subdomain. The second-level label 'artisanaquascapes' is 17 characters long holding 8 vowels versus nine consonants. Segmentation suggests 3 words: artisan, aquas, capes. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://artisanaquascapes.net

Page Load Overview

90.33s
Total Load Time
52
HTTP Requests
6
Domains
3.7 MB
Total Size

Language Analysis

Primary Language

馃嚭馃嚫English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:5,020 chars
Detector Agreement:80%

Website Classification

Primary Category

government public service47% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
47%
documentation technical
36%
corporate
35%
adult content
33%
education learning
27%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10172.67.142.245CloudflareWAFUnited States
AS13335Cloudflare, Inc.
6142.251.110.95GoogleCDNUnited States
AS15169Google LLC
6151.101.66.159FastlyCDNUnited States
AS54113Fastly, Inc.
6192.178.183.95GoogleCDNUnited States
AS15169Google LLC
6104.26.4.88CloudflareWAFUnited States
AS13335Cloudflare, Inc.
6188.114.96.9CloudflareWAFUnited States
AS13335Cloudflare, Inc.
6142.250.154.94GoogleCDNUnited States
AS15169Google LLC
6104.21.27.152CloudflareWAFUnited States
AS13335Cloudflare, Inc.
528--

Page Statistics

52
Requests
6
Unique Domains
3.7 MB
Total Size

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17D13B632F09544A63E1E9B7DE199F32CA598B219C6027BF6B0FD316C49845F700E7A1E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:r9i5Q62I/xE6x4g5bn/q8F+0aWhZdypaiq:JiCBKypm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:43142:CACgAAJwIwQzM3MIKBAQwoNsBACGqBSgQghJaARC0QgAgIaIEihEgPZAdYhT5RKIATcjGIhwQjUABAEEyW4IZmRgEFlgJIRG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:800000000000ffff
Perceptual Hash:b25bef3c90ac06e1
Difference Hash:3859dcdcdc2d0f0c
Wavelet Hash:880c6e0e0e04ffff
Color Hash:#87c5c1

Scan History

Scan history not available

Unable to load historical scan data