Security Scan Report: mepi.com.sa

Site favicon
Submitted: Sep 21, 2026, 11:47:28 PMCompleted: Sep 21, 2026, 11:48:31 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised/malicious page hosting a ClickFix fake-CAPTCHA kit impersonating Microsoft, with CRITICAL EtherHiding exfiltration alerts and multi-source Indicators of Compromise on the domain and injected resources.

Risk Factors (5)
ClickFix FakeCAPTCHA LOLBin phishing kit present on page
Impersonation of Microsoft account sign-in / SmartScreen in the fake verification overlay
EtherHiding exfiltration over blockchain RPC endpoints (CRITICAL IDS alerts)
Threat-intel Indicators of Compromise on primary domain and multiple injected third-party domains
Domain only 14 days old and unranked
Domain age information unavailable

Details

Page Title

MEPICO | Plastic Raw Materials Supplier & Manufacturer

Scan Type

public

Domain Name Analysis

Within the Saudi country-code top-level domain (.com.sa), 'mepi.com.sa' is registered with no subdomain. Its registrable label 'mepi' stretches across 4 characters containing 2 vowels alongside two consonants. Breaking it apart gives two words: mep, i. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mepi.com.sa

Page Load Overview

14.29s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,741 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software73% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
73%
e-commerce shopping
62%
social media network
56%
documentation technical
53%
government public service
53%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15162.241.219.65Phoenix, Arizona, United States
AS31898Oracle Corporation
7142.251.13.97Google · CDNUnited States
AS15169Google LLC
7192.178.183.97Google · CDNUnited States
AS15169Google LLC
7142.250.154.95Google · CDNUnited States
AS15169Google LLC
7216.239.32.36Google · CDNUnited States
AS15169Google LLC
7104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.18.10.59Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
735.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
7172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11315--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16E3294D2E79C486B029231999C3A72DCE03D517378508CE7FD9CA6690995CBC821BB3B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:B0dWo2PRU25k/udCulSczSIQg7N6dDaH6/oL8V+:BqWbmt/udtlSgLV0Y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11359:AASCIAIdwRAsIPL8BMXYAkyBzCTzCIwAYKSeiDoRKDRBsUxGFQipCODrog2ZFCCIyAiEOgFDEgAMJQSUOJIhGFzleAmqIQSM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9382ffffffd783c3
Perceptual Hash:fc4c2c2cc63c93d3
Difference Hash:2626002400262f0e
Wavelet Hash:8000feeefe8381e7
Color Hash:#78763a

Other Hashes

Crop Resistant:2626002400262f0e

Scan History

Scan history not available

Unable to load historical scan data