Security Scan Report: amaris.co.za

Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 3 domains to perform 28 HTTP transactions. The main domain is amaris.co.za and was registered 14 years ago.

Submitted URL: https://amaris.co.za

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Established domain whose primary host is flagged as malware (clearfake) by two independent feeds and whose scripts contact blockchain RPC nodes — site appears compromised/injected despite having no forms.

Risk Factors (3)
Multi-source corroborated malware threat-intelligence match (clearfake) on the page's primary domain
Site-served JavaScript opens connections to blockchain testnet RPC nodes, a pattern associated with injected/drainer-style scripts
Content is a bare placeholder with no functional business content, consistent with a compromised or hijacked site
Domain age information unavailable

Details

Page Title

UC

Scan Type

public

Domain Name Analysis

The domain name 'amaris.co.za' uses the South African country-code top-level domain (.co.za) while skipping any subdomain. The registrable portion 'amaris' spans 6 characters holding three vowels versus three consonants. Word splitting yields 2 words: a, maris. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://amaris.co.za

Page Load Overview

8.01s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:196 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10197.242.148.3Johannesburg, Gauteng, South Africa
AS37611AFRIHOST SP (PTY) LTD
2142.251.13.95Google · CDNUnited States
AS15169Google LLC
2104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
235.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
215.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
23.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
23.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
2142.251.13.94Google · CDNUnited States
AS15169Google LLC
2810--

Detected Technologies6

WordPressv7.1.3
100%
JQueryv3.7.1
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T174A29573E0A404567F5E87AD81D1B268E998E204EB06A776B0FC712C5FE4AF600B771D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:qDVnRGWdNJ6Ih7aer/ZdSZUaAhHkWDLOsVAhasAYA/8wAzS:cnRGWtZdypa9+SAhasAYA/8wAzS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:22258:CTWUQELaFJAQBk4BgEMClsjlgRHMKBREY0PgBATChhMgcwAARCeoAFBGTYFIQEIRlFEWOOAKRBFKaAmAlokgoAQMBgEWkayZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:efe7ffe1e3efe7ef
Perceptual Hash:f3cc983367cc9892
Difference Hash:0c4e20060e080a08
Wavelet Hash:eee60ee020262626
Color Hash:#d22d59

Other Hashes

Crop Resistant:0c4e20060e080a08

Scan History

Scan history not available

Unable to load historical scan data