Security Report: robotehran.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6ec16f91-c96a-45a6-a949-571fe7c34f77 Domain and IP registration (RDAP)/api/v1/rdap/6ec16f91-c96a-45a6-a949-571fe7c34f77How often this domain was scanned/api/v1/domain/stats/robotehran.com Scan history for this domain/api/v1/domain/history/robotehran.com?limit=15

This website contacted 8 IPs in 3 countries across 7 domains to perform 208 HTTP transactions. The main domain is robotehran.com and was registered 1 year 1 month ago.

Submitted URL: https://robotehran.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Genuine-looking Iranian shop compromised with an analyst-vetted IClickFix/EtherHiding loader: CRITICAL hunting-rule hit, three CRITICAL IDS malware alerts and a Sepolia RPC stage fetch. Avoid the site.

Risk Factors (5)

Known malicious ClickFix/EtherHiding loader injected into the page (roster-anchored, analyst-vetted)

CRITICAL hunting rule malware rule hit on page HTML

Three CRITICAL network IDS malware alerts tied to ClickFix domain zvh4.com and EtherHiding exfiltration

Live connection to an Ethereum Sepolia RPC endpoint used to retrieve an encrypted second-stage payload

Multi-source threat-intel match on the primary domain and on a page-loaded resource

Domain age information unavailable

Details

Page Title

خانه - روبوتهران

Scan Type

public

Domain Name Analysis

Domain 'robotehran.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'robotehran' stretches across 10 characters containing 4 vowels alongside six consonants. Breaking it apart gives three words: rob, o, tehran. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Mil “ev 6 eestm l 7 nee “* awool (49> WLesggy hed ay (15 j] Ainge ajlol g Syily gyly payin oauS aye hei gags ttt olSatigs’

Page Load Overview

91.17s

Total Load Time

4.4 MB

Total Size

Language Analysis

Primary Language

🇮🇷Persian

Code: fa

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:fa-IR

Text Length:12,383 chars

Detector Agreement:75%

Website Classification

Primary Category

news/blog70% confidence

Type: spa

Method: structural

All Detected Categories

news/blog

70%

corporate

70%

social_media

50%

Detected Features

Articles

Products

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
26	88.135.68.28	Iran	AS212296Dade Pardazan Fahim Shahin Shahr (Ltd)
26	142.251.110.95Google · CDN	United States	AS15169Google LLC
26	212.16.67.4	Iran	AS34837Institute for Research in Fundamental Sciences
26	104.18.0.22Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
26	185.111.111.155	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
26	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
26	185.111.111.157	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
26	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
208	8	-	-