Security Report: impactengineers.co.za - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9123e401-9d3c-48d0-9b25-b76904950b25 Domain and IP registration (RDAP)/api/v1/rdap/9123e401-9d3c-48d0-9b25-b76904950b25How often this domain was scanned/api/v1/domain/stats/impactengineers.co.za Scan history for this domain/api/v1/domain/history/impactengineers.co.za?limit=15

This website contacted 51 IPs in 7 countries across 25 domains to perform 180 HTTP transactions. The main domain is impactengineers.co.za and was registered 2 years 12 months ago.

Submitted URL: https://impactengineers.co.za

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate engineering firm's WordPress site is compromised with an ErrTraffic/Exvicy EtherHiding loader and a fake Cloudflare ClickFix prompt that tricks visitors into pasting malware into Terminal. Avoid.

Risk Factors (5)

Compromised WordPress site serving an injected ErrTraffic/Exvicy obfuscated loader (Base64 blob XOR-decoded and run via new Function)

ClickFix social-engineering overlay impersonating Cloudflare that walks visitors through pasting a command into the Windows Terminal

EtherHiding / blockchain-contract-based payload retrieval with exfiltration beacons

Cross-origin POST to old-brook-60ab.jennifermolinajocn2.workers.dev and other workers.dev endpoints

Google Safe Browsing Unwanted Software detection plus a malware-tagged primary domain reputation hit

Domain age information unavailable

Details

Page Title

Home - Impact Engineers

Scan Type

public

Favicon Hash

MMH3: 1277113795

MD5: 1dfe5ec70a4965ed758d9a8b1fcee21e

Domain Name Analysis

Within the South African country-code top-level domain (.co.za), 'impactengineers.co.za' is registered while skipping any subdomain. The second-level label 'impactengineers' is 15 characters long holding six vowels versus 9 consonants. Breaking it apart gives two words: impact, engineers. Average segment length settles at 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.31s

Total Load Time

24.6 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:4,739 chars

Detector Agreement:60%

Website Classification

Primary Category

corporate70% confidence

Type: spa

Method: structural

All Detected Categories

corporate

70%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
30	160.153.0.67Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
3	142.251.110.95Google · CDN	United States	AS15169Google LLC
3	23.207.210.148Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.250.154.94Google · CDN	United States	AS15169Google LLC
3	142.251.150.4Google · CDN	United States	AS15169Google LLC
3	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	91.210.146.149	Ukraine	AS199479Amtp LLC
3	95.100.121.144Akamai · CDN	Madrid, Madrid, Spain	AS16625Akamai Technologies, Inc.
180	51	-	-