Security Scan Report: aailc.co

Site favicon
Submitted: Oct 11, 2026, 11:20:06 PMCompleted: Oct 11, 2026, 11:20:55 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Compromised law-firm site now serving an injected ClickFix phishing kit (fake Cloudflare overlay, Win+X Terminal paste) plus EtherHiding blockchain-hosted malware with 19 critical IDS exfil alerts. Automated HIGH_RISK/CONFIRMED_SCAM escalation applies (YARA kit hit + malware IDS + multi-feed primary-domain IoC).

Risk Factors (5)
Analyst-vetted ClickFix phishing kit injected into the page (Win+X Terminal paste lure)
EtherHiding malware IDS alerts — Ethereum/Harmony smart-contract-hosted C2 over blockchain RPC nodes
Fake Cloudflare 'human verification' overlay impersonating a security brand
Primary domain and URL both matched as malware by two independent threat-intel feeds
Compromised legitimate law-firm site abused to deliver the payload
Domain age information unavailable

Details

Page Title

Home - المكتب العربي للمحاماة والاستشارات القانونية

Scan Type

public

Domain Name Analysis

The domain 'aailc.co' uses the Colombian country-code top-level domain (.co) with no subdomain. Its registrable label 'aailc' stretches across 5 characters holding 3 vowels versus two consonants. Splitting it apart reveals three words: a, ail, c. Expect 1 character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://aailc.co

Page Load Overview

12.41s
Total Load Time
4.3 MB
Total Size

Language Analysis

Primary Language

🇸🇦Arabic
Code: ar
Confidence:80%
Script:Arabic
Direction:rtl

Detection Details

HTML Lang Attribute:ar
Text Length:6,186 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service96% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
96%
blog personal website
93%
adult content
75%
education learning
53%
corporate business
40%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10104.21.79.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8104.26.9.123Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8142.250.154.95Google · CDNUnited States
AS15169Google LLC
8142.251.13.94Google · CDNUnited States
AS15169Google LLC
8146.75.120.157Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
8172.66.0.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
8172.67.146.150Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8172.67.75.33Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8142.251.20.95Google · CDNUnited States
AS15169Google LLC
18623--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E3040AB1D25E18360233519C90143769BDBFDA33C783DAA1B6FE81688FC6CED96A7114

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:HAgvsAjTA0A42AADAeyFOStdkJpVE35UqCOq9qNm0kljNbVmBNep9l7AtLXyV9tn:HtIpwBPtnypVE35UqCOq9qNm0ju

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:178831:gQSAY0hMQQcIIYkCyMWiUZkBIIyEG+EG0gTAADHAqpoE06GFABEqibAwCU6SQWASBGGA4IoAAAIBiEaSmBAGGEAaCeFDDaKS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:da5a7a7a78282c2d
Difference Hash:2100020000080000
Wavelet Hash:00fc32323e263e3e
Color Hash:#7994d2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data