Security Scan: دکتر عصمتی نیا

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/42645034-faaa-4c92-9204-cff88c582c41 Domain and IP registration (RDAP)/api/v1/rdap/42645034-faaa-4c92-9204-cff88c582c41How often this domain was scanned/api/v1/domain/stats/dresmatinia.com Scan history for this domain/api/v1/domain/history/dresmatinia.com?limit=15

This website contacted 8 IPs in 2 countries across 8 domains to perform 125 HTTP transactions. The main domain is dresmatinia.com and was registered 1 year ago.

Submitted URL: https://dresmatinia.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate-looking Iranian rhinoplasty clinic whose site has been compromised with an analyst-vetted IClickFix/EtherHiding loader; CRITICAL IDS malware alerts and threat-intel matches confirm active malware distribution to visitors.

Risk Factors (5)

Known malicious ClickFix/EtherHiding kit injected into the page (analyst-vetted kit roster, CRITICAL)

Multiple CRITICAL IDS malware alerts for EtherHiding exfiltration and ClickFix C2 domain zvh4.com

Blockchain-based EtherHiding loader retrieving a second stage from an Ethereum smart contract

Threat-intel match on the primary domain itself (unknown loader) and on the loaded ClickFix host zvh4.com (multi-feed)

Threat-feed hosts concealed inside obfuscated inline script

Domain age information unavailable

Details

Page Title

دکتر عصمتی نیا

Scan Type

public

Favicon Hash

MMH3: -815664616

MD5: a4289ef94f6e00c4c66f8ba0bf0222ad

Domain Name Analysis

The domain name 'dresmatinia.com' uses the commercial generic top-level domain (.com) with no subdomain. The second-level label 'dresmatinia' is 11 characters long containing five vowels alongside six consonants. Tokenizing the label suggests three words: dre, sma, tinia. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Shp BD bb ytd wags OP Ulelanio weraee JS Dr. Eamacinia ¢ o + Lb (jiwoe pss Sesto hypizas gg9Suagail BI ka ttl) Gebe agizes pogguigasl caridgld 9 Gia 9 Gl> 9 ubsS yaario

Page Load Overview

90.33s

Total Load Time

2.2 MB

Total Size

Language Analysis

Primary Language

🇮🇷Persian

Code: fa

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:fa-IR

Text Length:5,050 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical95% confidence

Type: spa

Method: ml+structural

All Detected Categories

healthcare medical

95%

blog personal website

95%

adult content

51%

government public service

41%

e-commerce shopping

25%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
20	195.28.10.50	Iran	AS212216Netafraz Iranian Ltd.
15	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	74.125.29.95Google · CDN	United States	AS15169Google LLC
15	212.16.67.4	Iran	AS34837Institute for Research in Fundamental Sciences
15	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	192.0.77.48	San Francisco, California, United States	AS2635Automattic, Inc
125	8	-	-