Security Scan Report: eaucool.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 6 domains to perform 27 HTTP transactions. The main domain is eaucool.com and was registered 26 years ago.

Submitted URL: https://eaucool.com

AI Security Verdict

Confirmed Scam

Confidence: 86%

9
Risk Score

Genuine water-service site whose pages carry injected malware: critical EtherHiding exfiltration alerts, blockchain contract-read fetches, and a malicious interseq.at resource. Do not browse or click.

Risk Factors (4)
Critical network IDS malware alerts (EtherHiding exfiltration) triggered by page activity
Blockchain RPC contract-read traffic consistent with hidden payload retrieval
Third-party resource from interseq.at corroborated as malicious by three threat feeds
Primary domain carries a malware-family indicator (iclickfix)
Domain age information unavailable

Details

Page Title

Eaucool | Filtered drinking water in Edmonton, Calgary, Red Deer, Vancouver

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'eaucool.com' is registered without a subdomain. Count 7 characters in 'eaucool' containing five vowels alongside two consonants. It segments into 2 words: eau, cool. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Seo 7 Home AboutUs Services. Product Hydration Filtered Drinking Water Systems Servicing Businesses In Edmonton And Surrounding Area Starting at only $44.95 Book an Appointment

Page Load Overview

5.60s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-CA
Text Length:1,398 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(97%)🇳🇴no(3%)

Website Classification

Primary Category

finance banking47% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
47%
documentation technical
37%
government public service
32%
corporate business
30%
adult content
26%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1852.138.20.176Azure · CLOUDToronto, Ontario, Canada
AS8075Microsoft Corporation
2104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
235.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2142.250.154.94Google · CDNUnited States
AS15169Google LLC
2104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.3.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.130.228Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2710--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T103842E674B416379A20646D381AC721B82ECC563FB2100DCF7CB18DEDE65DDB407A7AA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:B6GsZ3NBQu84+QAwXJ7wK6zBOtV1Ynz/3o3:B6GsZ3T84+Qd16dOV3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:386456:AkgkknQABLAagZKAYLDMFKqCoHC6MFQByAiqpsSNXASGwAkRS8qAALCiAwGAZBIApBxjCAScDCSigKTZgApAEQAtA8BA2S1A

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffe7c340
Perceptual Hash:f18e71865b245b63
Difference Hash:22340b0f0c0c179f
Wavelet Hash:00ff81c3efe7c340
Color Hash:06003000180

Scan History

Scan history not available

Unable to load historical scan data