ScanMalware.com

Security Scan Report: chipndipsauces.co.za

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cd76f5c4-1c36-4b53-80c8-7afbc8aceda9Domain and IP registration (RDAP)/api/v1/rdap/cd76f5c4-1c36-4b53-80c8-7afbc8aceda9How often this domain was scanned/api/v1/domain/stats/chipndipsauces.co.zaScan history for this domain/api/v1/domain/history/chipndipsauces.co.za?limit=15
This website contacted 25 IPs in 3 countries across 19 domains to perform 194 HTTP transactions. The main domain is chipndipsauces.co.za and was registered 3 years 3 months ago.

Submitted URL: https://chipndipsauces.co.za

AI Security Verdict

Confirmed Scam

Confidence: 94%

9
Risk Score

Legitimate Chip 'n Dip site compromised with an injected ClickFix kit: a fake Cloudflare 'Human Verification' overlay tells Windows users to open Terminal and paste commands, backed by EtherHiding/ClickFix IDS alerts and a CRITICAL YARA kit match.

Risk Factors (6)
Injected ClickFix (Win+X → Terminal) fake 'Human Verification' overlay — analyst-vetted malicious kit
CRITICAL YARA rule ClickFix_WinX_Overlay_Kit match on the page body
8 CRITICAL IDS alerts: EtherHiding Exfil M2 and ClickFix domain gateway.tenderly.co in DNS/TLS SNI
Primary domain flagged as 'clearfake (malware)' by two independent threat-intel feeds
Page instructs visitors to open Terminal and paste/execute commands (Ctrl+V, Enter)
Overlay impersonates a Cloudflare security check ('Cloudflare-protected sites')
Domain age information unavailable

Details

Page Title

Chip 'n Dip – It's in the Dip

Scan Type

public

Domain Name Analysis

Domain 'chipndipsauces.co.za' uses the South African country-code top-level domain (.co.za) with no subdomain. The second-level label 'chipndipsauces' is 14 characters long split between 5 vowels and 9 consonants. It segments into four words: chip, n, dip, sauces. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://chipndipsauces.co.za

Page Load Overview

7.51s
Total Load Time
33.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,977 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical80% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
80%
healthcare medical
40%
government public service
37%
education learning
31%
news media journalism
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
26213.133.106.166Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
7142.251.13.95Google · CDNUnited States
AS15169Google LLC
7142.251.13.94Google · CDNUnited States
AS15169Google LLC
7104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
735.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
7188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
7142.251.20.95Google · CDNUnited States
AS15169Google LLC
7142.250.154.94Google · CDNUnited States
AS15169Google LLC
19425--

Detected Technologies9

WordPressv7.1.3
100%
MetaGenerator
100%
JQueryv3.7.1
100%
Bootstrapv5.3.0
100%
PHP
50%
MySQL
50%
Cloudflare
50%
cdnjs
20%
Easy Pie Chart
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13A04F9E2759E2524310F0ACF90CA366D59E7AAB5EB1545EAF0F34258BAF1D403253E3C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:uLc9r2Y278lsy484rpj/F7RvkiNuteTKRPNpy1UB350cMCJ9kuiA:Ae

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:185131:YQViKE5AAs8BIAEBQ1Mm4cEIICEABpVUJgUJFgFckFWoYCEeUqMY05YQmoAADIqMKESgAsJGAgIJwHCMhiaYAhQBoIYqaMID

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003c0e3f0f8f8f3b
Perceptual Hash:97506f7807bc3136
Difference Hash:d1495c7adc1d3d4b
Wavelet Hash:00b40e3f0f8f8f3b
Color Hash:#99ac53

Other Hashes

Crop Resistant:5b5b585b5a5a5adb,11d1f939b49ceea7,222acdcdce4ca821,d0485c7a5c1d3c6a

Scan History

Scan history not available

Unable to load historical scan data