Security Report: www.bilisimzamani.net - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0b671725-2be8-418a-8d06-8487e0212589 Domain and IP registration (RDAP)/api/v1/rdap/0b671725-2be8-418a-8d06-8487e0212589 Certificate Transparency/api/v1/ct/bilisimzamani.net How often this domain was scanned/api/v1/domain/stats/bilisimzamani.net Scan history for this domain/api/v1/domain/history/bilisimzamani.net?limit=15

This website contacted 16 IPs in 2 countries across 15 domains to perform 90 HTTP transactions. The main domain is bilisimzamani.net and was registered 10 years ago.

Submitted URL: https://www.bilisimzamani.net/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised WordPress entertainment site. YARA-confirmed ErrTraffic/Exvicy loader plus a fake Cloudflare 'Human Verification' ClickFix overlay telling visitors to paste commands into Windows Terminal; 20 CRITICAL EtherHiding-exfil IDS alerts. Avoid.

Risk Factors (5)

Injected ErrTraffic/Exvicy WordPress loader with obfuscated Base64/XOR + new Function decoding (YARA-confirmed)

ClickFix fake 'Human Verification' overlay instructing users to run pasted commands in Windows Terminal/PowerShell

20 CRITICAL IDS alerts: ET MALWARE EtherHiding Exfil M2 (network trojan, EtherHiding C2 exfiltration)

Multi-source threat-intel match on the primary domain and its URL (clearfake / unknown malware)

Blockchain testnet RPC endpoints contacted by page scripts (wallet-drainer / EtherHiding infrastructure pattern)

Domain age information unavailable

Details

Page Title

Bilisimzamani – The Entertainment Arena

Scan Type

public

Favicon Hash

MMH3: -1615918519

MD5: 6dc6885f7bd35ea92682310d3a4b94d5

Domain Name Analysis

Domain 'www.bilisimzamani.net' uses the network infrastructure generic top-level domain (.net) with subdomain 'www'. The second-level label 'bilisimzamani' is 13 characters long containing 6 vowels alongside seven consonants. Tokenizing the label suggests 3 words: bilis, im, zamani. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

9.43s

Total Load Time

1.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:7,431 chars

Detector Agreement:75%

Website Classification

Primary Category

entertainment media99% confidence

Type: spa

Method: ml+structural

All Detected Categories

entertainment media

99%

news media journalism

70%

gambling betting

55%

government public service

38%

technology software

37%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	172.67.207.245Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.251.20.95Google · CDN	United States	AS15169Google LLC
5	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
5	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.251.20.94Google · CDN	United States	AS15169Google LLC
5	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
5	104.21.58.216Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
5	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
5	35.71.129.99Aws · CLOUD	United States	AS16509Amazon.com, Inc.
90	16	-	-