ScanMalware.com

Security Scan Report: clinicwiseai.com

Redirected to:
https://www.clinicwiseai.com/
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/235d1c9b-01ff-449b-b08f-b1f9aeda9315Domain and IP registration (RDAP)/api/v1/rdap/235d1c9b-01ff-449b-b08f-b1f9aeda9315How often this domain was scanned/api/v1/domain/stats/clinicwiseai.comScan history for this domain/api/v1/domain/history/clinicwiseai.com?limit=15
This website contacted 25 IPs in 2 countries across 18 domains to perform 114 HTTP transactions. The main domain is clinicwiseai.com and was registered 1 year 10 months ago.

Submitted URL: https://clinicwiseai.com

Effective URL:
https://www.clinicwiseai.com/
Redirected

AI Security Verdict

High Risk

Confidence: 84%

8
Risk Score

Self-branded Hebrew clinic-management site on an aged domain, but the page triggers repeated CRITICAL IDS malware alerts (EtherHiding exfil, ClickFix) and loads a multi-source flagged malicious resource — evidence of malware distribution or a compromised site.

Risk Factors (5)
CRITICAL IDS malware alerts (EtherHiding exfiltration and ClickFix domain) triggered on page activity
Multi-source flagged malicious external resource (checkyoubrowse.codes) loaded by the page
Primary domain flagged as unknown malware loader (single-source)
Unsolicited blockchain RPC / smart-contract calls on a healthcare-business page (possible EtherHiding C2 channel)
Malicious third-party script host (178.16.52.101) reached as a sub-resource
Domain age information unavailable

Details

Page Title

Clinic Wise AI - הדור הבא של ניהול מרפאותother network

Scan Type

public

Domain Name Analysis

The domain name 'clinicwiseai.com' uses the commercial generic top-level domain (.com) with no subdomain. The second-level label 'clinicwiseai' is 12 characters long with six vowels and six consonants. Word splitting yields four words: clinic, wise, a, i. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://clinicwiseai.com

Page Load Overview

21.59s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇮🇱Hebrew
Code: he
Confidence:80%
Script:Hebrew
Direction:rtl

Detection Details

HTML Lang Attribute:he-IL
Text Length:3,553 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical99% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
99%
technology software
98%
corporate business
94%
education learning
76%
government public service
63%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.18.0.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
435.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
4178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
4172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.155.4Google · CDNUnited States
AS15169Google LLC
4104.18.1.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11425--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B724505373D4063BA29E09CAD115320E12F3D6ABF46061E8FBF355EEB868C913536672

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:gWo0opB//ulauLuTJBI9sKr72IDlKhMit9/xUc/hbHoMyLRAH:9OtuLCJBI9sK2H

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:226746:ZwIAY+ZSMTCBQkuSiJAHQRYUggEojpaAApMKIGgQgeGAg080FBIQQTSSmI8BNFTBbLDBWARJPs8AIuLGhEZgEEW2BEFFBgIs

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffff0000001c3c
Perceptual Hash:8ae5df210e3fa09a
Difference Hash:e4400851b18b6171
Wavelet Hash:ffffff0000003c3c
Color Hash:#931f25

Other Hashes

Crop Resistant:e4400851b18b6171,1008323232300810

Scan History

Scan history not available

Unable to load historical scan data