Security Scan Report: poliklinikazzaara.com.my

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 8 domains to perform 182 HTTP transactions. The main domain is poliklinikazzaara.com.my and was registered 6 years ago.

Submitted URL: https://poliklinikazzaara.com.my

AI Security Verdict

High Risk

Confidence: 90%

8
Risk Score

Established Malaysian clinic site that appears compromised: an injected ClickFix/AMOS stealer loader (CRITICAL kit-roster and IDS matches) is served to visitors. No forms on page; avoid interacting and do not follow any paste-to-terminal prompts.

Risk Factors (5)
Injected ClickFix/AMOS stealer loader script on a compromised legitimate website
CRITICAL network IDS alert for AMOS ClickFix campaign loader request
Analyst-vetted kit roster match for a macOS infostealer distribution kit
Suspicious external script host silver-birch-lepfliois.pro (non-clinic, attacker-pattern domain)
Visitors may be shown a fake bot-protection page with ClickFix paste-to-terminal instructions
Domain age information unavailable

Details

Page Title

Poliklinik Az-Zaara Ampang – Klinik No.1 Di Ampang

Scan Type

public

Domain Name Analysis

You're looking at domain 'poliklinikazzaara.com.my' on the Malaysian country-code top-level domain (.com.my). Its registrable label 'poliklinikazzaara' stretches across 17 characters with eight vowels and nine consonants. Splitting it apart reveals 6 words: poli, kl, inika, zz, a, ara. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Growth Scan Kandungan 8 Minggu & seterusnya ¥ Perkembangan bayi vy Denyutan jantung bayi v Saiz & berat bayi y Kandungan air ketuban RM RM RM y¥ Kedudukan bayi & uri ¥ 2D Growth Scan + Gender Scan...

Page Load Overview

7.68s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:4,104 chars
Detector Agreement:50%

Website Classification

Primary Category

healthcare medical98% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
98%
government public service
79%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
28103.27.74.99Kuala Lumpur, Kuala Lumpur, Malaysia
AS55720Gigabit Hosting Sdn Bhd
22104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22142.251.110.95Google · CDNUnited States
AS15169Google LLC
2245.159.144.29Seychelles
AS203273NetCrafters OU
22192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
22142.251.110.94Google · CDNUnited States
AS15169Google LLC
22192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
22104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1828--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CDE3B7B2BC4B1C1F122B47CF9007660CB0DABAD5D6529AE8F9F6016CA3F1CF0366A555

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:oxk/uxAyuAaAxfAxRndeAH7MyA6A5gZ2QKqS9+914Y6EjgZ2QKqSrHsbgnzDXH8C:du/Khgf5gZ2QKqS9+914Y6EjgZ2QKqS5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:154340:rhAggWAIUtgAZAVWwxes30KTkAgghEF7KAgDoVJQNoSjHCAmAIURbFSiNkSQZSkAPKEYCoImAkwgSAPECaywAYiUuoQrdZ0B

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f010160ffffffff
Perceptual Hash:88181887c7c7e79f
Difference Hash:f3b5b596940c8d25
Wavelet Hash:1d0000007fe7fffd
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data