ScanMalware.com

Security Scan Report: findingzarephath.com

Site favicon
Submitted: Oct 8, 2026, 12:03:19 PMCompleted: Oct 8, 2026, 12:03:57 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

Legitimate ministry site appears compromised: high-precision YARA plus analyst-vetted kit roster and a CRITICAL IDS alert confirm an injected Macfinger ClickFix / AMOS stealer loader served via poalmcreorvelvet.pro. Do not click prompts or run any paste-commands.

Risk Factors (4)
Injected ClickFix/AMOS stealer loader confirmed by high-precision YARA and analyst-vetted kit roster
CRITICAL IDS alert for an in-the-wild AMOS ClickFix malware campaign
Off-site unranked script host (poalmcreorvelvet.pro) receiving sendBeacon data from page scripts
Compromised-site malware delivery: visitors may be prompted to paste a command that installs macOS AMOS infostealer
Domain age information unavailable

Details

Page Title

Home - Finding Zarephath

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'findingzarephath.com' is registered and has no subdomain. Its registrable label 'findingzarephath' stretches across 16 characters containing 5 vowels alongside eleven consonants. Word splitting yields 5 words: finding, z, are, pha, th. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://findingzarephath.com

Page Load Overview

4.54s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,639 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical41% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
41%
corporate
25%

Detected Features

Articles
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21199.250.208.147United States
AS22611InMotion Hosting, Inc.
18142.251.110.95Google · CDNUnited States
AS15169Google LLC
18193.29.224.97Helsinki, Uusimaa, Finland
AS210644Aeza Group LLC
18142.251.110.94Google · CDNUnited States
AS15169Google LLC
754--

Detected Technologies10

X-UA-Compatible
100%
WordPressv6.7.10
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
Bootstrapv1.18.4
100%
PHP
50%
OWL Carousel
50%
MySQL
50%
BoldGrid
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16583F873B138895F235283847021F69AE8459423DE83FEF8B6B5921CC3C1DF652676AD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:9EapvjykU4g3pmvoh1eZG1fy0y1ploG5IiPywQZhl/onyX:9jZjykU4g5xh1Za0CzIiPywQZhl/onyX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:84435:AiwDhBSU0AFwIIAJO5GCkDqQMYknnoACCCIALkgAIGAHS4AANFDEgCmCiRogoIoG/DARCBJ4ACw4AAgtCIgDQwAMEzJCBahx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff000000000004
Perceptual Hash:a2f5dec98d692432
Difference Hash:704c0e17c5e5c96d
Wavelet Hash:ffffc303003c3434
Color Hash:#2d8649

Other Hashes

Crop Resistant:704c0e17c5e5c96d,c2a29aa2a682b282,0c0696c4e4c1cd6d

Scan History

Scan history not available

Unable to load historical scan data