Security Scan: فروشگاه خدمات سی ان جی1

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/596b20d3-abbf-4e8d-9a4c-94f4be8c268c Domain and IP registration (RDAP)/api/v1/rdap/596b20d3-abbf-4e8d-9a4c-94f4be8c268cHow often this domain was scanned/api/v1/domain/stats/khdamatcng0.com Scan history for this domain/api/v1/domain/history/khdamatcng0.com?limit=15

This website contacted 8 IPs in 4 countries across 8 domains to perform 19 HTTP transactions. The main domain is khdamatcng0.com and was registered 3 weeks ago.

Submitted URL: https://khdamatcng0.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Compromised-looking 8-day-old Iranian CNG parts shop serving an IClickFix/EtherHiding malware loader (YARA + analyst-vetted kit + 5 CRITICAL IDS alerts) alongside APK/ZIP downloads. Avoid.

Risk Factors (5)

Malicious ClickFix/EtherHiding injection confirmed by YARA and the analyst-vetted kit roster

CRITICAL IDS malware alerts for ClickFix domains and EtherHiding exfiltration

Primary domain flagged as a malware loader by threat intelligence

Third-party payload host zvh4.com corroborated by two independent feeds

Very new (8-day-old), unranked domain hosting app/archive downloads

Domain age information unavailable

Details

Page Title

فروشگاه خدمات سی ان جی1

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'khdamatcng0.com' is registered and has no subdomain. The registrable portion 'khdamatcng0' spans 11 characters holding 2 vowels versus eight consonants; it also includes one digit. Splitting it apart reveals 5 words: kh, dam, at, cng, 0. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

75.87s

Total Load Time

34 KB

Total Size

Language Analysis

Primary Language

🇮🇷Persian

Code: fa

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:fa-IR

Text Length:3,415 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence

Type: spa

Method: structural

All Detected Categories

corporate

70%

news/blog

40%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	185.208.173.217	United Kingdom	AS202269BitCommand LLC
2	212.16.67.4	Iran	AS34837Institute for Research in Fundamental Sciences
2	185.143.233.132Arvancloud · CDN	Iran	AS205585Noyan Abr Arvan Co. ( Private Joint Stock)
2	87.107.2.34	Iran	AS215708Mobin Arvand Infrastructure Company LTD
2	81.12.31.29	Iran	AS215708Mobin Arvand Infrastructure Company LTD
2	46.245.89.91	Iran	AS43754Asiatech Data Transmission company
2	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
2	184.24.77.83Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
0	8	-	-