Security Scan: Zetaclinic

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6e24e3ab-2162-4d26-ac03-e3c6982e9da0 Domain and IP registration (RDAP)/api/v1/rdap/6e24e3ab-2162-4d26-ac03-e3c6982e9da0 Certificate Transparency/api/v1/ct/zetaclinic.it How often this domain was scanned/api/v1/domain/stats/zetaclinic.it Scan history for this domain/api/v1/domain/history/zetaclinic.it?limit=15

This website contacted 19 IPs in 3 countries across 21 domains to perform 135 HTTP transactions. The main domain is zetaclinic.it and was registered 1 month ago.

Submitted URL: https://zetaclinic.it/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised ZetaClinic WordPress site now serving a ClickFix fake-CAPTCHA overlay that lures visitors into pasting a malicious shell command into Terminal; CRITICAL kit-roster, YARA and IDS malware hits confirm.

Risk Factors (6)

Injected ClickFix fake-CAPTCHA social-engineering kit that copies a malicious shell command to the clipboard

Fake Cloudflare 'Human Verification' overlay instructing Win+X / Terminal / Ctrl+V / Enter (Windows) and macOS Terminal paste flow

Analyst-vetted CRITICAL kit-roster matches for ClickFix and ErrTraffic/Exvicy WordPress injection

16 CRITICAL IDS alerts including EtherHiding exfiltration and ClickFix domain contact

Injected SEO-spam / hidden content unrelated to the clinic's business, indicating a compromised CMS

Multiple third-party domains flagged as 'ek clearfake-1' malware delivery (interseq.at, interseqf.com, mioiooo.icu, triapfog.com, norediam.com, cloudflare-check.net, clickzona.net, browseid.codes) loaded as page resources

Domain age information unavailable

Details

Page Title

Zetaclinic

Scan Type

public

Domain Name Analysis

The domain name 'zetaclinic.it' uses the Italian country-code top-level domain (.it) with no subdomain. The registrable portion 'zetaclinic' spans 10 characters with 4 vowels and 6 consonants. Breaking it apart gives 2 words: zeta, clinic. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

42.78s

Total Load Time

2.7 MB

Total Size

Language Analysis

Primary Language

🇮🇹Italian

Code: it

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:4,055 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical95% confidence

Type: spa

Method: ml+structural

All Detected Categories

healthcare medical

95%

cryptocurrency blockchain

93%

technology software

56%

adult content

42%

corporate business

40%

Detected Features

OG: article

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	213.158.94.246	Italy	AS34762Combell NV
7	142.251.110.95Google · CDN	United States	AS15169Google LLC
7	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
7	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
7	172.67.191.179Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	142.251.14.94Google · CDN	United States	AS15169Google LLC
7	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
7	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	192.178.183.95Google · CDN	United States	AS15169Google LLC
135	19	-	-