Security Scan Report: iddistributors.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 8 domains to perform 322 HTTP transactions. The main domain is iddistributors.com and was registered 18 years ago.

Submitted URL: https://iddistributors.com/

AI Security Verdict

High Risk

Confidence: 90%

8
Risk Score

Aged Magento storefront that is compromised: analyst-vetted DeepVein CMS-block loader (CRITICAL YARA) injects hidden code showing fake Chrome/Cloudflare checks. No forms harvested, but visitors risk malware — avoid.

Risk Factors (5)
Known malicious kit identified by analyst-vetted roster (DeepVein Magento CMS-block loader, phishing)
CRITICAL high-precision YARA hit on page HTML (DeepVein_CMS_Block_Loader)
Site appears compromised: malware injected into Magento CMS content blocks, persisting via localStorage/onclick execution
Loader behaviour delivers fake browser/security update prompts (ClickFix-style) to visitors
20 eval() and 9 Function() constructor usages indicating dynamic code generation on the page
Domain age information unavailable

Details

Page Title

Porto - Homepage 27

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'iddistributors.com' is registered. The core label 'iddistributors' covers 14 characters with five vowels and 9 consonants. Tokenizing the label suggests 2 words: id, distributors. Expect seven characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://iddistributors.com/

Page Load Overview

30.43s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:23,887 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical80% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
80%
technology software
73%
e-commerce shopping
73%
government public service
69%
blog personal website
65%

Detected Features

Login Form
Search
Products

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
42173.249.147.215United States
AS40819Liquid Web, L.L.C
35142.251.13.95Google · CDNUnited States
AS15169Google LLC
35142.251.110.94Google · CDNUnited States
AS15169Google LLC
35188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
35188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
35142.251.20.139Google · CDNUnited States
AS15169Google LLC
35142.251.20.100Google · CDNUnited States
AS15169Google LLC
35142.251.110.97Google · CDNUnited States
AS15169Google LLC
35142.251.13.94Google · CDNUnited States
AS15169Google LLC
3229--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T114054160E8F58A32296B94E091F02B5A7EC2F32BD68109D172DC47611FD9DE1A73B64C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:f1lqZDefDQlBAhs5dPjdY5dp7dELddndkVdPSdY1dpgdEGdd9dkwdPAdYTdp7dEm:f1lRfDQDAhsip47

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:826718:EwbIGJQINCQACJoYAWSiBAZkAkYgAFEABAMFOSAiSgAEAqgIyoQN1AY0BMKAVTAaFE1ihBKbSo4ssDEoGUhIEBAwMQLIYAgE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data