ScanMalware.com

Security Scan Report: sfwaretech.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b7af3a90-74be-472e-9507-bf8b16230f5bDomain and IP registration (RDAP)/api/v1/rdap/b7af3a90-74be-472e-9507-bf8b16230f5bHow often this domain was scanned/api/v1/domain/stats/sfwaretech.comScan history for this domain/api/v1/domain/history/sfwaretech.com?limit=15
This website contacted 7 IPs in 4 countries across 8 domains to perform 22 HTTP transactions. The main domain is sfwaretech.com and was registered 3 years 10 months ago.

Submitted URL: https://sfwaretech.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Legitimate-looking SF Waretech WordPress site is compromised and injects ClearFake/Macfinger ClickFix loaders that deliver the AMOS stealer via blockchain-hosted payloads; visitors should avoid it.

Risk Factors (5)
Injected ClearFake / Macfinger ClickFix malware kit serving macOS AMOS stealer to visitors
EtherHiding payload retrieval via blockchain smart contract (polygon RPC)
Multiple corroborated malicious third-party script domains loaded on page
Critical IDS alerts for malware loader requests and exfiltration
Compromised WordPress installation (Astra theme) distributing drive-by malware
Domain age information unavailable

Details

Page Title

SF Waretech

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'sfwaretech.com' is registered without a subdomain. The registrable portion 'sfwaretech' spans 10 characters holding 3 vowels versus 7 consonants. It segments into 3 words: sfwa, re, tech. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

SF Waretech 404 About v1 About v2 Approve User Become Seller Blog Cart Cart Change Password Checkout Checkout Contact Delete Profile. Employer Meetings Employers Layoutv? EmployersLayoutv? FAQ Free...

Page Load Overview

5.36s
Total Load Time
343 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,637 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software69% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
69%
government public service
56%
documentation technical
50%
adult content
47%
corporate business
43%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.105.113.101Singapore, Singapore
AS63949Akamai Connected Cloud
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
3147.45.70.138Frankfurt am Main, Hesse, Germany
AS210644Aeza Group LLC
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
3104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
394.23.162.163Saarbrücken, Saarland, Germany
AS16276OVH SAS
354.38.220.85France
AS16276OVH SAS
227--

Detected Technologies5

WordPressv7.1.4
100%
MetaGenerator
100%
PHP
50%
MySQL
50%
Nginx
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T174D3B6B1B7A0343F263B536DF927FB18A5A54913DA4EA7C2F0BE905848C5F9605B130E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:4/y0WOlAA7x5YnAlnD0FKHh0yprvRTdeCbYt4RN:t0NlAA95qsp6t4X

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:137261:wuYcQSEjAHKAqKCIFAgAhAMggUMMFWUCDh2YgcGHEQAIDICZNQwNUMEOHQ6AlkGAAQuBAKNBbIRMjYJIUAzhANFDEy0dQARH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fee6fe9fffff7f1f
Perceptual Hash:80ff00ff02ff0783
Difference Hash:020602220212f0e0
Wavelet Hash:e2c2e282c3c35f1f
Color Hash:N/A

Other Hashes

Crop Resistant:020602220212f0e0

Scan History

Scan history not available

Unable to load historical scan data