Security Scan Report: amoysupply.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 21 IPs in 2 countries across 14 domains to perform 94 HTTP transactions. The main domain is amoysupply.com and was registered 6 years ago.

Submitted URL: https://amoysupply.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Legitimate-looking Saudi sourcing site whose page is compromised with an analyst-confirmed IClickFix/EtherHiding ClickFix injection; CRITICAL ET MALWARE alerts and obfuscated blockchain loader make it unsafe to visit.

Risk Factors (5)
Injected EtherHiding/ClickFix loader on a compromised legitimate business site
Obfuscated JavaScript with blockchain-based payload retrieval and hidden malicious hosts
Multiple malicious third-party domains loaded by the page (zvh4.com, tenderly.co gateways)
Threat-intel match against the primary domain as a stealer
Potential ClickFix social-engineering overlay served to Windows visitors
Domain age information unavailable

Details

Page Title

الرئيسية - Amoy Supply

Scan Type

public

Domain Name Analysis

The domain name 'amoysupply.com' uses the commercial generic top-level domain (.com). The registrable portion 'amoysupply' spans 10 characters with 3 vowels and 7 consonants. Tokenizing the label suggests three words: a, moy, supply. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://amoysupply.com

Page Load Overview

5.61s
Total Load Time
3.0 MB
Total Size

Language Analysis

Primary Language

🇸🇦Arabic
Code: ar
Confidence:80%
Script:Arabic
Direction:rtl

Detection Details

HTML Lang Attribute:ar
Text Length:2,615 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical87% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
87%
corporate business
82%
adult content
68%
blog personal website
48%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.250.154.97Google · CDNUnited States
AS15169Google LLC
4142.251.151.4Google · CDNUnited States
AS15169Google LLC
4216.239.32.36Google · CDNUnited States
AS15169Google LLC
435.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
4216.239.34.36Google · CDNUnited States
AS15169Google LLC
4142.251.150.4Google · CDNUnited States
AS15169Google LLC
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
4142.250.154.154Google · CDNUnited States
AS15169Google LLC
9421--

Detected Technologies12

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13F432BF2929214A91B59C75CE5F1790CED34D913EA17E8F7B1AE10A81BE18E3050B73E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:riCwjpM+LT96kypKSmYHjnpoV60t0P050/0i3qBfQWv5v1490H9WRoMkBYmY060w:zv+LT9o7zpoV60t0P050/0i3qBfQWxte

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:58813:QIw8ABWCCAAAkwUQnZhkIA7eIxAUAMFhCQVADUYUBgbBYHCcgEABVhW8QWFAFt4imIMEKYwKLIAYKwBghJAoKCbLKDgwyUA9

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7efde8e0e8ccfcff
Perceptual Hash:db4a95960d4a13b7
Difference Hash:e00111111198145a
Wavelet Hash:7ef8e8c0c8c8ec8e
Color Hash:#40acbf

Other Hashes

Crop Resistant:e00111111198145a

Scan History

Scan history not available

Unable to load historical scan data