Security Scan Report: rockadventures.com.au

Site favicon
Submitted: Completed: publiccompleted
This website contacted 33 IPs in 2 countries across 18 domains to perform 175 HTTP transactions. The main domain is rockadventures.com.au.

Submitted URL: https://rockadventures.com.au

AI Security Verdict

High Risk

Confidence: 93%

9
Risk Score

Legitimate Geelong climbing gym whose pages have been compromised with a ClickFix/EtherHiding loader that pulls a malicious payload from a blockchain contract; scanners and visitors should avoid it.

Risk Factors (4)
Known malicious kit (ClickFix/EtherHiding loader) injected into the page HTML
Obfuscated script retrieving an encrypted payload from a blockchain smart contract
Multiple CRITICAL network IDS malware alerts for ClickFix/EtherHiding infrastructure
Decoded script contacted threat-feed-listed hosts (0xrpc.io, 1rpc.io, gateway.tenderly.co)
Domain age information unavailable

Details

Page Title

The Rock Adventure Centre – Indoor rock climbing in Geelong

Scan Type

public

Domain Name Analysis

Within the Australian country-code top-level domain (.com.au), 'rockadventures.com.au' is registered with no subdomain. The core label 'rockadventures' covers 14 characters containing five vowels alongside 9 consonants. It segments into 2 words: rock, adventures. Median word length comes out to seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rockadventures.com.au

Page Load Overview

5.85s
Total Load Time
3.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:11,596 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog40% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
40%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15198.23.57.139United States
AS14555LiquidNet US LLC
5142.251.155.4Google · CDNUnited States
AS15169Google LLC
5142.251.14.97Google · CDNUnited States
AS15169Google LLC
535.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
5104.21.72.64Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.150.119Google · CDNUnited States
AS15169Google LLC
5142.251.154.119Google · CDNUnited States
AS15169Google LLC
5157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
5142.251.110.94Google · CDNUnited States
AS15169Google LLC
5172.217.116.4Google · CDNUnited States
AS15169Google LLC
17533--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15A544B329229D538C71F82C04AB5B74C354E92DEE61856BCF3ACC954CBC8FF729A1949

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:tNxqnmUw+R6QCFYSPhdiL+DoeqpKKBQ1hP2Lp0CC9YJ00BQPW:tWAV2rH

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:294713:UsSqZCSCQUx2UanAEIDJAgkGNJQlDgXAJEFiwOq2HwcAYnki8HQkrJBIsEDChBaIBDnSkQbAgIAIVclJBKGIpCrSwQkIkQ0T

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3c3c3c3c3c7ffff
Perceptual Hash:b164ce3632cd9699
Difference Hash:2e0e0e0e0a0ed2d8
Wavelet Hash:838381838383fbff
Color Hash:#96d22d

Scan History

Scan history not available

Unable to load historical scan data