Security Scan Report: alholol-almobtakara.com

Submitted: Sep 23, 2026, 1:18:27 PMCompleted: Sep 23, 2026, 1:19:57 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Legitimate-looking Arabic cleaning site is compromised: it loads an EtherHiding/ClickFix malware chain (AMOS loader) via blockchain RPC and flagged third-party domains, with multiple critical malware IDS alerts.

Risk Factors
EtherHiding malware exfiltration script delivered from blockchain smart contracts
ClickFix / AMOS loader campaign script request (custom macOS stealer)
Primary domain URL flagged as malware on 2 independent feeds
Loads multiple malware/IoC-flagged external domains (trackerredirect.online, entry-code-cdn.codes)
Unranked domain (not in Cisco Umbrella top 1M) with negligible legitimacy score (10/100)
Domain age information unavailable

Details

Page Title

شركة الحلول المبتكرة تنظيف شقق تنظيف خزانات غسيل كنب وسجاد – نقدم خدمات تنظيف شقق، خزانات، وغسيل كنب وسجاد في الدمام وضواحيها، مع ضمان الجودة والاحترافية في كل خدمة.

Scan Type

public

Domain Name Analysis

You're looking at domain 'alholol-almobtakara.com' on the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'alholol-almobtakara' spans 19 characters containing eight vowels alongside 10 consonants, notching one hyphen. Word splitting yields seven words: al, ho, lol, al, mob, ta, kara. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://alholol-almobtakara.com

Page Load Overview

11.74s
Total Load Time
5.0 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:21%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:ar
Text Length:1,591 chars
Detector Agreement:50%
Language mismatch: Declared as ar but detected as fr

Website Classification

Primary Category

gambling betting94% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
94%
social media network
93%
entertainment media
77%
adult content
42%
documentation technical
39%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14162.241.226.61Phoenix, Arizona, United States
AS31898Oracle Corporation
2185.92.183.208Riga, Riga, Latvia
AS56971Cgi Global Limited
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
2138.124.60.214Switzerland
AS203273NetCrafters OU
2192.178.183.97Google · CDNUnited States
AS15169Google LLC
2142.251.14.95Google · CDNUnited States
AS15169Google LLC
2142.251.14.97Google · CDNUnited States
AS15169Google LLC
2172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.151.119Google · CDNUnited States
AS15169Google LLC
4818--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E9336625D36484E53D5FCB29C186F31CF5547A80CA8957E7F0B1E260988CABA24F771E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:r4xTX0KpGtbo4lSVZdypm8C7wWTth63cZOYDGmgz4:Ih9yp2wWTth63cZOYDGmgz4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:52977:AgBEAAwRCE0FDRA5BwE+NECEQDawDBCmBSwCBwIBywGBiYxwRoUKPYYNPDIZDGqCc+AIkhAJDBUAoUQ6MgiICkIg8w4ifGCA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefefefeffffffff
Perceptual Hash:d555aaaaaa55a8aa
Difference Hash:0000000000000000
Wavelet Hash:0e0e0e0e0e0e0e0e
Color Hash:#d22d69

Other Hashes

Crop Resistant:0000000000000000

Scan History

Scan history not available

Unable to load historical scan data