Security Scan: Al Hilal Central College

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4a8e0dd7-2853-4f50-ac84-673dd2f1b887 Domain and IP registration (RDAP)/api/v1/rdap/4a8e0dd7-2853-4f50-ac84-673dd2f1b887 Certificate Transparency/api/v1/ct/alhilalnegombo.lk How often this domain was scanned/api/v1/domain/stats/alhilalnegombo.lk Scan history for this domain/api/v1/domain/history/alhilalnegombo.lk?limit=15

This website contacted 4 IPs in 2 countries across 4 domains to perform 68 HTTP transactions. The main domain is alhilalnegombo.lk and was registered 1 week ago.

Submitted URL: https://alhilalnegombo.lk

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate-looking school site compromised and serving the Macfinger ClickFix AMOS stealer: kit-roster CRITICAL matches, a CRITICAL YARA loader hit and a CRITICAL IDS AMOS alert. Do not visit; report it.

Risk Factors (5)

Known malicious ClickFix/AMOS stealer kit injected into the page (2 kit-roster sightings, both CRITICAL)

CRITICAL YARA rule match for ClickFix_BotProtection_Loader

CRITICAL IDS alert for AMOS ClickFix loader request

Unranked external script host poalmcreorvelvet.pro contacted via sendBeacon

Domain only 1 day old with no established reputation

Domain age information unavailable

Details

Page Title

Al Hilal Central College

Scan Type

public

Favicon Hash

MMH3: -936192751

MD5: a89e74f30ced6b7e282d49c4980f27c1

Domain Name Analysis

The domain name 'alhilalnegombo.lk' uses the Sri Lankan country-code top-level domain (.lk). The registrable portion 'alhilalnegombo' spans 14 characters holding six vowels versus eight consonants. Segmentation suggests 5 words: al, hilal, ne, g, ombo. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.92s

Total Load Time

2.7 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:6,231 chars

Detector Agreement:75%

Website Classification

Primary Category

education learning86% confidence

Type: spa

Method: ml+structural

All Detected Categories

education learning

86%

government public service

64%

news/blog

20%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	144.208.78.210	United States	AS54641InMotion Hosting, Inc.
17	142.251.13.95Google · CDN	United States	AS15169Google LLC
17	193.29.224.97	Helsinki, Uusimaa, Finland	AS210644Aeza Group LLC
17	142.251.110.94Google · CDN	United States	AS15169Google LLC
68	4	-	-