Security Scan: Dr Omar Qureshi​ Liver Specialist in Islamaba

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9929567c-e2ac-4fc3-8efa-1dde400d11bd Domain and IP registration (RDAP)/api/v1/rdap/9929567c-e2ac-4fc3-8efa-1dde400d11bd Certificate Transparency/api/v1/ct/gastroliver.com.pk How often this domain was scanned/api/v1/domain/stats/gastroliver.com.pk Scan history for this domain/api/v1/domain/history/gastroliver.com.pk?limit=15

This website contacted 24 IPs in 4 countries across 20 domains to perform 135 HTTP transactions. The main domain is gastroliver.com.pk and was registered 10 years ago.

Submitted URL: https://gastroliver.com.pk

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Legitimate 5-year-old Islamabad gastroenterology clinic whose WordPress site has been compromised — it now loads ClearFake/EtherHiding exploit-kit scripts and blockchain RPC nodes, triggering 10 critical malware IDS alerts and a Safe Browsing Unwanted Software flag.

Risk Factors

Google Safe Browsing: Unwanted Software.

ET MALWARE EtherHiding Exfil M2 triggered 10 times (CRITICAL).

Exploit-kit dropper domains (captioto.com, cptoptious.com) loaded by the page.

Blockchain RPC/seed connections used for EtherHiding payload retrieval.

eval() dynamic code execution and injected scripts on an otherwise static WordPress medical site.

Domain age information unavailable

Details

Page Title

Dr Omar Qureshi Liver Specialist in Islamabad

Scan Type

public

Favicon Hash

MMH3: 254798240

MD5: 3d2ff1a84a9c95afe373a5a7657e7ee6

Domain Name Analysis

The domain 'gastroliver.com.pk' uses the Pakistani country-code top-level domain (.com.pk) without a subdomain. The registrable portion 'gastroliver' spans 11 characters containing 4 vowels alongside 7 consonants. Word splitting yields three words: gas, tr, oliver. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

80.51s

Total Load Time

2.7 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:9,725 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical78% confidence

Type: spa

Method: ml+structural

All Detected Categories

healthcare medical

78%

education learning

55%

adult content

54%

government public service

51%

social media network

45%

Detected Features

OG: article

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
20	142.251.13.94Google · CDN	United States	AS15169Google LLC
5	178.16.53.137	Amsterdam, North Holland, Netherlands	AS202412Omegatech LTD
5	172.217.119.4Google · CDN	United States	AS15169Google LLC
5	104.18.11.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
5	142.251.20.139Google · CDN	United States	AS15169Google LLC
5	142.251.156.119Google · CDN	United States	AS15169Google LLC
5	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
5	172.217.112.4Google · CDN	United States	AS15169Google LLC
5	34.111.175.102Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
135	24	-	-