Security Scan Report: clinicaltrialtools.com

Redirected to:
https://clinicaltrialtools.com/?ckattempt=1
Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 4 countries across 13 domains to perform 137 HTTP transactions. The main domain is clinicaltrialtools.com and was registered 7 years ago.

Submitted URL: https://clinicaltrialtools.com/

Effective URL:
https://clinicaltrialtools.com/?ckattempt=1
Redirected

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Legitimate Korean clinical-research forum whose pages have been compromised: an obfuscated injected script loads TA569/SocGholish malware domains, and Safe Browsing flags unwanted software. Avoid visiting until cleaned.

Risk Factors (4)
Injected obfuscated script loading known TA569/SocGholish middleware domains
Safe Browsing unwanted-software detection
Critical exploit-kit network alerts tied to the page's own script loads
Third-party malware host embedded in page code
Domain age information unavailable

Details

Page Title

임실모

Scan Type

public

Domain Name Analysis

Domain 'clinicaltrialtools.com' uses the commercial generic top-level domain (.com) without a subdomain. Count 18 characters in 'clinicaltrialtools' containing seven vowels alongside 11 consonants. Word splitting yields 3 words: clinical, trial, tools. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

2 » 2 ee sig OF EVENT eumOIM Pee AE aD AERC. GSCRP serene = ARLE| aga ag Best 7 aee ‘OIAP AIS ASTHSO] ot eioll 214 xIA| Bz IRB 7|2 Bet ‘ = © aS TALK e271 > 4S SW OISH] © aR | Eat ‘QHASHIR! ECRF ASSA...

Page Load Overview

38.55s
Total Load Time
6.5 MB
Total Size

Language Analysis

Primary Language

🇰🇷Korean
Code: ko
Confidence:80%
Script:Hangul
Direction:ltr

Detection Details

HTML Lang Attribute:ko-KR
Text Length:7,332 chars
Detector Agreement:100%

Website Classification

Primary Category

forum community discussion80% confidence
Type: spa
Method: ml+structural

All Detected Categories

forum community discussion
80%
education learning
57%
adult content
55%
corporate business
53%
government public service
41%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11175.125.94.19Seoul, Seoul, South Korea
AS9318SK Broadband Co Ltd
974.125.29.95Google · CDNUnited States
AS15169Google LLC
9104.20.33.75Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.109.143.93Akamai · CDNHaarlem, North Holland, Netherlands
AS20940Akamai International B.V.
9142.250.154.97Google · CDNUnited States
AS15169Google LLC
9172.66.174.217Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.109.143.80Akamai · CDNHaarlem, North Holland, Netherlands
AS20940Akamai International B.V.
9216.239.32.36Google · CDNUnited States
AS15169Google LLC
13715--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FC64A821C6EE193A517393D1E4607F6434EE9832CE2158E4BBFF46A88BC8E11771B758

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:5oyO1FObJupJuKW3FcRCSNjtCG/bUok42OKDNMM:5oYMM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:327038:AIAaPglyQQGQByiHiQjBNEI4cggjUFAQrtUAIhBDCoeRLUAGAAgAAuRIIKArAEtBCpKiBEaByJECNGDSxIBGIA9CTgMRommG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:02b981a1f9f9fbff
Perceptual Hash:ef7396c091626e68
Difference Hash:4c6b2b4333232376
Wavelet Hash:00a181a1b9f9fbbb
Color Hash:N/A

Other Hashes

Crop Resistant:4c6b2b4333232376

Scan History

Scan history not available

Unable to load historical scan data