ScanMalware.com

Security Scan Report: www.aquamart.co.za

Site favicon
Submitted: Sep 13, 2026, 11:47:31 AMCompleted: Sep 13, 2026, 11:49:09 AMpubliccompleted

Summary

This website contacted 6 IPs in 2 countries across 7 domains to perform 2 HTTP transactions. The main domain is aquamart.co.za and was registered 5 years ago.

Submitted URL: https://www.aquamart.co.za

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Legitimate-looking 12-year-old South African water store appears compromised: primary-domain malware IoC (clearfake, 2 feeds) plus CRITICAL EtherHiding blockchain exfiltration IDS alert and injected RPC/code-gen scripts.

Risk Factors
Multi-source malware IoC on the primary domain
CRITICAL IDS malware exfiltration alert (EtherHiding)
Injected blockchain-RPC exfiltration behavior on a benign e-commerce site
Dynamic code generation (Function constructor) inconsistent with site purpose
Domain age information unavailable

Details

Page Title

Aquamart - Your Trusted Source for Water Solutions

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

corporate

(35%)

Domain Information

Within the South African country-code top-level domain (.co.za), 'www.aquamart.co.za' is registered and includes subdomain 'www'. The second-level label 'aquamart' is 8 characters long split between four vowels and 4 consonants. Word splitting yields 2 words: aqua, mart. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.aquamart.co.za

Page Load Overview

75.21s
Total Load Time
102
HTTP Requests
7
Domains
45 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:4,444 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate35% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate
35%
documentation technical
26%
news/blog
20%

Detected Features

Search
Articles
Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
17197.221.2.35Cape Town, Western Cape, South Africa
AS37153Xneelo (Pty) Ltd
17142.251.110.95Google · CDNUnited States
AS15169Google LLC
17142.251.110.94Google · CDNUnited States
AS15169Google LLC
17104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1026--

Page Statistics

102
Requests
7
Unique Domains
107.9 KB
Total Size

Detected Technologies8

WordPressv7.1
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
WooCommerce
20%
Font Awesome
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A5E3C672B7602939327B537DE987B78439288623E64D26E6F8BEC15C85C97D3107270E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:ehEwGnAltf+SuWMHfqCa7IuoNRnyp+8vCiu5sB84P:e1lSiu5sB84P

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:150394:IkICHIETgVi1ABgMgCYBsgCAqFCJCADLQswAI0LYQEAUdhBEEJCkQgjEKA3HRMI6tQrGZQdKWUSEBD0CIqLTAkAgLABFAkAN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000c1c1ffffffff
Perceptual Hash:e96916936d696896
Difference Hash:2bf1070360c8e026
Wavelet Hash:00008181bfffffb3
Color Hash:#7997d2

Other Hashes

Crop Resistant:2bf1070360c8e026,004021cecece8601,0404e4e6e6540100,5233d0503030331b

Scan History

Scan history not available

Unable to load historical scan data