Security Scan: سارال خبر

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/08d13293-0f7f-4f14-8fef-d04a3cee41ef Domain and IP registration (RDAP)/api/v1/rdap/08d13293-0f7f-4f14-8fef-d04a3cee41efHow often this domain was scanned/api/v1/domain/stats/saralkhabar.com Scan history for this domain/api/v1/domain/history/saralkhabar.com?limit=15

This website contacted 4 IPs in 3 countries across 3 domains to perform 84 HTTP transactions. The main domain is saralkhabar.com and was registered 13 years ago.

Submitted URL: https://saralkhabar.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate-looking Persian news site that is compromised and serves a ClickFix/EtherHiding malware loader; critical IDS alerts and an analyst-vetted malicious kit match make the page dangerous to visit.

Risk Factors (4)

Injected ClickFix/EtherHiding loader executing obfuscated JavaScript on page load

Network IDS detected malware exfiltration and ClickFix C2/domain contact (zvh4.com) during the scan

Obfuscated script conceals Ethereum RPC and threat-feed endpoints used for dead-drop stage retrieval

Known malicious kit roster match (IClickFix) — compromised-site injection pattern

Domain age information unavailable

Details

Page Title

سارال خبر

Scan Type

public

Favicon Hash

MMH3: 354513994

MD5: f5b0fda5246c128a602c154108334ee9

Domain Name Analysis

The domain name 'saralkhabar.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'saralkhabar' is 11 characters long split between 4 vowels and seven consonants. Breaking it apart gives two words: saral, khabar. Median word length is 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

1405 gli 9 : joyol wile! cud ano ya JI Lw worlaidl g cloiol eWled Ghol ying ecuicl p26 cael »> LalBiil clogs GAA ay oil L osilQ.> axe> ple yl 49.9 Cul e2,0 wlul clajls jl cyial dS anole Cura! Lad C...

Page Load Overview

9.85s

Total Load Time

1.9 MB

Total Size

Language Analysis

Primary Language

🇮🇷Persian

Code: fa

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:fa-IR

Text Length:2,535 chars

Detector Agreement:67%

Website Classification

Primary Category

government public service91% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

91%

adult content

88%

education learning

86%

blog personal website

60%

news media journalism

58%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
21	185.143.233.133Arvancloud · CDN	Iran	AS205585Noyan Abr Arvan Co. ( Private Joint Stock)
21	185.143.234.133Arvancloud · CDN	Iran	AS205585Noyan Abr Arvan Co. ( Private Joint Stock)
21	146.19.24.104	Poland	AS201814MEVSPACE sp. z o.o.
21	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
84	4	-	-