Security Scan: ساتراپ

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4b0378ca-2ea6-49c2-803e-db15c3f5fef1 Domain and IP registration (RDAP)/api/v1/rdap/4b0378ca-2ea6-49c2-803e-db15c3f5fef1How often this domain was scanned/api/v1/domain/stats/satrap.site Scan history for this domain/api/v1/domain/history/satrap.site?limit=15

This website contacted 6 IPs in 2 countries across 5 domains to perform 92 HTTP transactions. The main domain is satrap.site and was registered 5 months ago.

Submitted URL: https://satrap.site

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Content reads as a normal Iranian-cities blog, but the page is compromised: an obfuscated EtherHiding/ClickFix loader fetched from a blockchain, a kit-roster CRITICAL phishing match, and 3 CRITICAL IDS malware alerts make it malicious.

Risk Factors (5)

Compromised page carrying an injected ClickFix/EtherHiding malware loader

Obfuscated JavaScript concealing blockchain RPC endpoints and command-and-control hosts

EtherHiding technique fetching encrypted second-stage payload from a smart contract

Threat-intel flagged malware domains loaded by the page (zvh4.com, satrap.site)

CRITICAL network IDS malware alerts for ClickFix and EtherHiding exfiltration

Domain age information unavailable

Details

Page Title

ساتراپ

Scan Type

public

Favicon Hash

MMH3: 530492348

MD5: dcab89b8e04bf53fcd7f6a44a8cb4fae

Domain Name Analysis

The domain name 'satrap.site' uses the .site top-level domain with no subdomain. Count 6 characters in 'satrap' containing 2 vowels alongside 4 consonants. Word splitting yields 1 word: satrap. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.62s

Total Load Time

4.8 MB

Total Size

Language Analysis

Primary Language

🇮🇷Persian

Code: fa

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:fa-IR

Text Length:2,793 chars

Detector Agreement:67%

Website Classification

Primary Category

entertainment media39% confidence

Type: spa

Method: ml+structural

All Detected Categories

entertainment media

39%

blog personal website

32%

news/blog

20%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	185.143.234.132Arvancloud · CDN	Iran	AS205585Noyan Abr Arvan Co. ( Private Joint Stock)
15	74.125.29.95Google · CDN	United States	AS15169Google LLC
15	142.250.154.94Google · CDN	United States	AS15169Google LLC
15	185.143.233.132Arvancloud · CDN	Iran	AS205585Noyan Abr Arvan Co. ( Private Joint Stock)
15	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
92	6	-	-