Security Report: web.aloha-hk.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6b77b9b2-32ac-458a-a159-491c9011f4ea Domain and IP registration (RDAP)/api/v1/rdap/6b77b9b2-32ac-458a-a159-491c9011f4ea Certificate Transparency/api/v1/ct/web.aloha-hk.com How often this domain was scanned/api/v1/domain/stats/web.aloha-hk.com Scan history for this domain/api/v1/domain/history/web.aloha-hk.com?limit=15

This website contacted 11 IPs in 4 countries across 12 domains to perform 189 HTTP transactions. The main domain is web.aloha-hk.com and was registered 8 years ago.

Submitted URL: https://web.aloha-hk.com/

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate-looking Hong Kong corporate services site whose pages have been compromised: analyst-vetted ClickFix/AMOS stealer and ErrTraffic loader YARA kits plus CRITICAL malware IDS alerts are present. Do not interact.

Risk Factors (6)

Analyst-vetted malicious kit injected into page (ErrTraffic/Exvicy WordPress loader)

ClickFix/AMOS stealer first-stage loader present in page HTML

CRITICAL IDS alerts for EtherHiding exfiltration and AMOS loader download

Page content includes fake Cloudflare 'verify you are human' ClickFix lure

Page loads multiple threat-intel-flagged malware/exploit-kit resource domains

Unranked third-party script hosts serving JavaScript to the page

Domain age information unavailable

Details

Page Title

Aloha Enterprise Limited – 成立公司, 公司秘書, 虛擬辦公室, 稅務

Scan Type

public

Favicon Hash

MMH3: -2007136037

MD5: 0ca3c18eb456279663a3b338932efe45

Domain Name Analysis

The domain 'web.aloha-hk.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'web'. Its registrable label 'aloha-hk' stretches across 8 characters holding three vowels versus 4 consonants, notching one hyphen. Tokenizing the label suggests 2 words: aloha, hk. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

15.35s

Total Load Time

3.7 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:113,573 chars

Detector Agreement:50%

Website Classification

Primary Category

finance banking100% confidence

Type: spa

Method: ml+structural

All Detected Categories

finance banking

100%

corporate business

100%

government public service

100%

adult content

100%

blog personal website

100%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
19	203.86.233.224	Hong Kong	AS133380Layerstack Limited
17	142.251.110.95Google · CDN	United States	AS15169Google LLC
17	193.233.138.178	Helsinki, Uusimaa, Finland	AS210644Aeza Group LLC
17	142.251.14.94Google · CDN	United States	AS15169Google LLC
17	35.208.104.235Google · CDN	Council Bluffs, Iowa, United States	AS15169Google LLC
17	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
17	158.94.211.226	Rotterdam, South Holland, Netherlands	AS202412Omegatech LTD
17	104.21.45.182Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
17	66.198.240.11	United States	AS55293A2 Hosting, Inc.
17	172.67.218.28Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
189	11	-	-