Security Scan Report: ayswteb.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 83 HTTP transactions. The main domain is ayswteb.com and was registered 1 year 2 months ago.

Submitted URL: https://ayswteb.com

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Legitimate-looking Persian shop, but the page carries an analyst-confirmed IClickFix/EtherHiding loader reading an encrypted stage from an Ethereum Sepolia contract, plus a domain malware indicator — do not visit.

Risk Factors (4)
Compromised WordPress-style storefront serving an injected ClickFix / EtherHiding loader to Windows visitors
Malicious JavaScript obfuscated with blockchain-contract (Ethereum Sepolia) dead-drop retrieval
Threat-intelligence indicator on the primary domain (unknown loader, single-source)
Anti-analysis behavior (context-menu blocking)
Domain age information unavailable

Details

Page Title

آیسو طب – فروشگاه تجهیزات پزشکی

Scan Type

public

Domain Name Analysis

The domain 'ayswteb.com' uses the commercial generic top-level domain (.com) without a subdomain. The core label 'ayswteb' covers 7 characters split between two vowels and five consonants. Segmentation suggests four words: a, ys, wt, eb. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

%% Corre) a oPOMFODedt eulags ylojlis jh jas jgrre hho 433 glopeg.uls e suspeine CBT pore alSirg,S P e299 Jil j1 89 ala eg Sy Lb uted Lo oybyo Sty altgy§—LLol anrtuo . JosdaS ylgy GloUj Eloi! l...

Page Load Overview

5.24s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇮🇷Persian
Code: fa
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:fa-IR
Text Length:5,453 chars
Detector Agreement:75%

Website Classification

Primary Category

adult content40% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
40%
government public service
38%
healthcare medical
37%
forum
25%
news/blog
20%

Detected Features

Search
Articles
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
83195.28.168.40Iran
AS212216Netafraz Iranian Ltd.
831--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T128C4B67175B619BA612F23CE9022334C6087EFEAF69593F0F3B311546AB4C863A534E5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:XIfRdhkIvm2hxjDh5OiHZEmyiGeV1itVgeVL7/:XIfRd4GiQE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:578195:GopgRB0GCWISy0QCGsBKKX0YBQKQyBAmEAZFC4ATFRwEEJKoEgIJCyiqE9K246bwRNC2QAYgjBQlwQAbLBIGJJapADSBAXZq

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bfff858585ffffff
Perceptual Hash:bf3fc0c03e3e64c0
Difference Hash:67606f2d2d930817
Wavelet Hash:bdbe000000e7fff9
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data