Security Scan: 大分市城東病院 精神科専門病院のホームページ

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/74750f45-15fb-4af5-8947-38cafdb12b21 Domain and IP registration (RDAP)/api/v1/rdap/74750f45-15fb-4af5-8947-38cafdb12b21How often this domain was scanned/api/v1/domain/stats/joto-hp.jp Scan history for this domain/api/v1/domain/history/joto-hp.jp?limit=15

This website contacted 28 IPs in 2 countries across 12 domains to perform 109 HTTP transactions. The main domain is joto-hp.jp and was registered 16 years ago.

Submitted URL: https://joto-hp.jp

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Legitimate 16-year-old hospital site appears compromised, injecting a ClickFix/EtherHiding malware loader and fake 'Human Verification' overlay; visitors are at risk of malware execution.

Risk Factors (5)

Compromised page injecting a ClickFix fake 'Human Verification' overlay that instructs Windows users to open Terminal

EtherHiding malware loader fetching payload addresses from a blockchain contract

Obfuscated inline script concealing malicious RPC/loader hosts

CRITICAL IDS malware alert and corroborated malicious threat-intel on the primary domain and loaded resource

Third-party malicious content served from cloud-browse.codes / 178.16.52.101 alongside legitimate hospital content

Domain age information unavailable

Details

Page Title

大分市城東病院精神科専門病院のホームページ

Scan Type

public

Favicon Hash

MMH3: -26529799

MD5: 19b6cb83e60311de378c1aa2029012a8

Domain Name Analysis

The domain 'joto-hp.jp' uses the Japanese country-code top-level domain (.jp) with no subdomain. Count 7 characters in 'joto-hp' with 2 vowels and four consonants, along with one hyphen. Splitting it apart reveals three words: jo, to, hp. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.65s

Total Load Time

4.7 MB

Total Size

Language Analysis

Primary Language

🇯🇵Japanese

Code: ja

Confidence:80%

Script:Mixed

Direction:ltr

Detection Details

HTML Lang Attribute:ja

Text Length:520 chars

Detector Agreement:80%

Website Classification

Primary Category

healthcare medical48% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

healthcare medical

48%

adult content

34%

corporate

25%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
28	172.67.214.130Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.110.95Google · CDN	United States	AS15169Google LLC
3	192.178.183.97Google · CDN	United States	AS15169Google LLC
3	142.251.155.119Google · CDN	United States	AS15169Google LLC
3	142.251.14.94Google · CDN	United States	AS15169Google LLC
3	216.239.34.36Google · CDN	United States	AS15169Google LLC
3	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
3	104.21.78.15Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
109	28	-	-