Security Report: al-loaloah.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b0878c0a-60c6-4bb2-8a8b-7ebd68d1e497 Domain and IP registration (RDAP)/api/v1/rdap/b0878c0a-60c6-4bb2-8a8b-7ebd68d1e497How often this domain was scanned/api/v1/domain/stats/al-loaloah.com Scan history for this domain/api/v1/domain/history/al-loaloah.com?limit=15

This website contacted 6 IPs in 3 countries across 6 domains to perform 105 HTTP transactions. The main domain is al-loaloah.com and was registered 13 years ago.

Submitted URL: https://al-loaloah.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate 13-year-old Kuwaiti dental clinic site that has been compromised: it injects a ClickFix fake-verification overlay with an EtherHiding blockchain loader, matching an analyst-vetted malware kit and multiple critical IDS/Indicator of Compromise hits. Avoid.

Risk Factors (5)

Compromised WordPress site (title 'Just another WordPress site') injecting a ClickFix fake-verification overlay and a packed blockchain loader

EtherHiding technique: next-stage payload address read from a Polygon smart contract via obfuscated JavaScript

CRITICAL IDS alerts for malware exfiltration and exploit-kit cluster check-in; HIGH Spamhaus DROP-listed inbound traffic

Obfuscated script hides known-attacker domains (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co) that only appear after decoding

Unranked third-party script host browse-codes-enter.beer contacted by page scripts via fetch, consistent with attacker-controlled loading code

Domain age information unavailable

Details

Page Title

al-loaloah – Just another WordPress site

Scan Type

public

Favicon Hash

MMH3: 1864671184

MD5: dc89bd56e7b450dff7c2be8bd0c97987

Domain Name Analysis

The domain name 'al-loaloah.com' uses the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'al-loaloah' spans 10 characters with 5 vowels and 4 consonants; it also includes 1 hyphen. Segmentation suggests four words: al, loa, loa, h. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.27s

Total Load Time

4.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,565 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical25% confidence

Type: spa

Method: ml+structural

All Detected Categories

healthcare medical

25%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
20	187.126.112.100	Mumbai, Maharashtra, India	AS47583Hostinger International Limited
17	142.251.14.95Google · CDN	United States	AS15169Google LLC
17	142.251.20.94Google · CDN	United States	AS15169Google LLC
17	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
17	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
17	142.251.127.94Google · CDN	United States	AS15169Google LLC
105	6	-	-