ScanMalware.com

Security Scan Report: sdermedique.com

Site favicon
Submitted: Oct 14, 2026, 6:27:08 PMCompleted: Oct 14, 2026, 6:27:52 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Established skincare site whose pages have been compromised and now inject Macfinger ClickFix (AMOS stealer) and ClearFake loaders — confirmed by vetted kit roster, critical YARA hits and a CRITICAL IDS malware alert. Malicious; avoid.

Risk Factors (5)
Compromised legitimate site injecting ClickFix/AMOS-stealer and ClearFake loaders into every visitor's page
CRITICAL IDS malware alert (AMOS loader script request)
Analyst-vetted malicious kit identification (Macfinger ClickFix, ClearFake)
Threat-intel 'unknown loader (malware)' match on the primary domain
Injected third-party spam content and unranked script host fliorkfliixsable.pro receiving sendBeacon data
Domain age information unavailable

Details

Page Title

S.Dermedique – 靈魂產品 成就中草美肌傳奇

Scan Type

public

Domain Name Analysis

The domain 'sdermedique.com' uses the commercial generic top-level domain (.com). The registrable portion 'sdermedique' spans 11 characters split between five vowels and 6 consonants. Segmentation suggests 4 words: s, der, medi, que. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sdermedique.com

Page Load Overview

8.00s
Total Load Time
10.6 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-hant
Text Length:2,520 chars
Detector Agreement:33%

Website Classification

Primary Category

healthcare medical74% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
74%
adult content
40%
government public service
35%
news/blog
20%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20104.21.21.146Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12192.178.183.95Google · CDNUnited States
AS15169Google LLC
1292.243.74.51Cloudflare · WAFSingapore
AS203273NetCrafters OU
12142.251.150.119Google · CDNUnited States
AS15169Google LLC
12142.250.154.94Google · CDNUnited States
AS15169Google LLC
12142.251.14.94Google · CDNUnited States
AS15169Google LLC
12172.67.199.33Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12142.251.154.119Google · CDNUnited States
AS15169Google LLC
12142.251.156.119Google · CDNUnited States
AS15169Google LLC
12142.251.151.119Google · CDNUnited States
AS15169Google LLC
15212--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AFE33BA2AE0E143F011B24C5B4DC7F4D75E29523CF4A8AD9F6FAA129E7C8EE8155170C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:uNNtAh9vgt+Ah3MXjoh7EcnOyM9VekfoQ18udDt7Bje3ISN4Yni50qKKuXcOR7vh:Lh9oBEcnOyM9Vekfw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:153448:U1UFwqABHAwEARCAQEBGxTFA6QRIBEA1dBAyIGKmUKFZQaikJxSZhhbRasJMRkRgD4QZGgiYM6ajCARAQqkJCEIAAIOIpQpj

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7743838607850fe
Perceptual Hash:c387b432b70e8df0
Difference Hash:2c88626ad8d295c0
Wavelet Hash:e77cb8306070d0fe
Color Hash:#3a785b

Other Hashes

Crop Resistant:2c88626ad8d295c0

Scan History

Scan history not available

Unable to load historical scan data