Security Scan Report: asm-app.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 26 IPs in 3 countries across 22 domains to perform 112 HTTP transactions. The main domain is asm-app.com and was registered 6 months ago.

Submitted URL: https://asm-app.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Hosting-branded page on asm-app.com carrying two analyst-vetted ClickFix fake-CAPTCHA kits (LOLBin + Win+X Terminal), 19 critical EtherHiding exfiltration IDS alerts, and a two-feed 'iclickfix' malware Indicators of Compromise on the primary domain. Do not interact.

Risk Factors (6)
Content-malware Indicators of Compromise on the primary domain (iclickfix, two corroborating feeds)
Two analyst-vetted ClickFix phishing kits detected by high-precision YARA rules
Fake security/verification overlay text on the page ('Performing security verification', 'Verification successful')
19 CRITICAL ET MALWARE EtherHiding Exfil M2 network IDS alerts
Blockchain RPC (BSC testnet) connections from page scripts
Domain unranked in Cisco Umbrella and only ~180 days old
Domain age information unavailable

Details

Page Title

Best Web Hosting Company in Bangladesh | RoyelHost

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'asm-app.com' is registered and has no subdomain. The second-level label 'asm-app' is 7 characters long containing two vowels alongside 4 consonants; bonus characters include 1 hyphen. Tokenizing the label suggests three words: as, m, app. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://asm-app.com

Page Load Overview

4.67s
Total Load Time
2.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:28,076 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software71% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
71%
documentation technical
39%
corporate business
36%
corporate
35%
e-commerce
30%

Detected Features

Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4139.99.8.188Singapore, Singapore
AS16276OVH SAS
4157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
4142.250.154.97Google · CDNUnited States
AS15169Google LLC
4104.20.42.169Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4216.239.32.36Google · CDNUnited States
AS15169Google LLC
4142.251.127.156Google · CDNUnited States
AS15169Google LLC
4142.251.20.94Google · CDNUnited States
AS15169Google LLC
454.177.64.219Aws · CLOUDSan Jose, California, United States
AS16509Amazon.com, Inc.
4157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
11226--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B1248572A166243B432B53CF7292931DB0E3520ADB9A898473FC939C4FDBC95792741E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:/UBzBOit80QdmJGNcqWWIIBhZfuH8On4C+BwOy5gdhk/uwQReIesoUQvhCgau1q5:IcmSV3mpELrDHGu/O/5RpEHmjDahviq

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:230271:CCA5ORZAcxSAgw0EFyFiGAAbAIxSXEYDQBhQdJYBESUyLQSBPwIMxAUUraNNAgXVgAUkAUaKIgDAMFIsEOZoEBUbCS8CRDQA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffc3e7fefefcfc
Perceptual Hash:d5a95a152a647d5a
Difference Hash:a4481e0f4c2ad0a8
Wavelet Hash:00ff83c3e6aa60fc
Color Hash:#ac8d53

Scan History

Scan history not available

Unable to load historical scan data