Security Report: sapir-eng.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0299fc80-391d-4237-bb16-3833f637cfde Domain and IP registration (RDAP)/api/v1/rdap/0299fc80-391d-4237-bb16-3833f637cfdeHow often this domain was scanned/api/v1/domain/stats/sapir-eng.com Scan history for this domain/api/v1/domain/history/sapir-eng.com?limit=15

This website contacted 28 IPs in 4 countries across 22 domains to perform 161 HTTP transactions. The main domain is sapir-eng.com and was registered 3 years 10 months ago.

Submitted URL: https://sapir-eng.com

Effective URL:

https://www.sapir-eng.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Genuine Israeli construction site compromised with an injected ClickFix/EtherHiding blockchain loader: analyst-vetted CRITICAL kit, 7 CRITICAL EtherHiding IDS alerts and Safe Browsing Unwanted Software. Do not interact.

Risk Factors (4)

Injected ClickFix 'Human Verification' kit instructing Windows users to open Terminal (Win+X) — social-engineering malware delivery

EtherHiding: next-stage payload address retrieved from a Polygon smart contract via obfuscated JavaScript

7 CRITICAL IDS malware alerts (EtherHiding Exfil M2) plus Safe Browsing Unwanted Software detection

Malware IoC matches on the primary domain and on loaded third-party hosts (cloud-browse.codes, 178.16.52.101) reached by page scripts

Domain age information unavailable

Details

Page Title

ספיר הנדסה ובניה - קבלנים לבניית משרדים | עבודות גמר למשרדים | בניית מבני ציבור

Scan Type

public

Favicon Hash

MMH3: 1723294745

MD5: 98900cc6be0110dc9a9bb1ae8070c094

Domain Name Analysis

Domain 'sapir-eng.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Count 9 characters in 'sapir-eng' split between three vowels and five consonants; it also includes 1 hyphen. Splitting it apart reveals four words: s, a, pir, eng. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

10.46s

Total Load Time

14.5 MB

Total Size

Language Analysis

Primary Language

🇮🇱Hebrew

Code: he

Confidence:80%

Script:Hebrew

Direction:rtl

Detection Details

HTML Lang Attribute:he-IL

Text Length:1,782 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business89% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

89%

government public service

69%

social media network

67%

documentation technical

66%

adult content

65%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
26	192.185.193.223	Ashburn, Virginia, United States	AS31898Oracle Corporation
5	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	172.64.147.103Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
5	142.251.20.97Google · CDN	United States	AS15169Google LLC
5	18.66.102.106Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
5	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
5	65.9.130.127Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
5	23.52.181.124Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
161	28	-	-