Security Report: mepi.com.sa - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3fa3c3e8-8154-42d6-85a2-8bb28b3bb3e8 Domain and IP registration (RDAP)/api/v1/rdap/3fa3c3e8-8154-42d6-85a2-8bb28b3bb3e8 Certificate Transparency/api/v1/ct/mepi.com.sa How often this domain was scanned/api/v1/domain/stats/mepi.com.sa Scan history for this domain/api/v1/domain/history/mepi.com.sa?limit=15

This website contacted 23 IPs in 1 country across 19 domains to perform 123 HTTP transactions. The main domain is mepi.com.sa and was registered 18 years ago.

Submitted URL: https://mepi.com.sa

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised MEPICO plastics site serving an injected ClickFix/FileFix fake 'Microsoft verify' overlay that copies a shell command to the clipboard; CRITICAL YARA, IDS and threat-intel all confirm malware distribution.

Risk Factors (5)

ClickFix/FileFix clipboard-injection kit injected into the page (fake human-verification prompt with paste-and-run instructions)

Impersonates Microsoft account security / SmartScreen in the fake verification overlay on a non-Microsoft domain

Critical network IDS alerts for EtherHiding malware exfiltration and a known ClickFix distribution domain

Third-party malicious exploit-kit/clearfake domains contacted by page scripts

Primary domain mepi.com.sa flagged as a malware 'unknown loader' in threat intelligence (single source)

Domain age information unavailable

Details

Page Title

MEPICO | Plastic Raw Materials Supplier & Manufacturer

Scan Type

public

Favicon Hash

MMH3: 2049752252

MD5: bab63dd8d582c6fac4554ff62b7b241f

Domain Name Analysis

The domain 'mepi.com.sa' uses the Saudi country-code top-level domain (.com.sa) while skipping any subdomain. Its registrable label 'mepi' stretches across 4 characters holding two vowels versus 2 consonants. Splitting it apart reveals 2 words: mep, i. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

14.50s

Total Load Time

3.2 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,741 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software73% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

73%

e-commerce shopping

62%

social media network

58%

documentation technical

53%

government public service

52%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	162.241.219.65	Phoenix, Arizona, United States	AS31898Oracle Corporation
5	142.251.14.97Google · CDN	United States	AS15169Google LLC
5	216.239.34.36Google · CDN	United States	AS15169Google LLC
5	142.251.110.95Google · CDN	United States	AS15169Google LLC
5	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
5	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.251.110.94Google · CDN	United States	AS15169Google LLC
123	23	-	-