Security Scan: راهکارها و خدمات تخصصی نرم افزار سازمانی SAP

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9a1f89d9-8d5a-4de3-b574-f71023473b9c Domain and IP registration (RDAP)/api/v1/rdap/9a1f89d9-8d5a-4de3-b574-f71023473b9cHow often this domain was scanned/api/v1/domain/stats/sap.ir Scan history for this domain/api/v1/domain/history/sap.ir?limit=15

This website contacted 6 IPs in 2 countries across 6 domains to perform 132 HTTP transactions. The main domain is sap.ir.

Submitted URL: https://sap.ir

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate-looking SAP consulting site whose page has been compromised with an analyst-confirmed IClickFix/EtherHiding malware loader; critical IDS and threat-intel hits confirm active malware distribution to visitors.

Risk Factors (5)

Confirmed ClickFix / EtherHiding malware loader injected into the page's JavaScript

Obfuscated script that only reveals known-malicious blockchain RPC and ClickFix hosts after decoding

Multiple CRITICAL ET MALWARE network IDS alerts tied to ClickFix domains

Primary domain flagged in threat intelligence as an 'unknown loader'

Site is serving malicious code to its visitors despite benign visible content (likely compromised)

Domain age information unavailable

Details

Page Title

راهکارها و خدمات تخصصی نرم افزار سازمانی SAP - گروه نرم افزاری SAPEX

Scan Type

public

Favicon Hash

MMH3: -523709493

MD5: 52c6c6a031c16859f02c29ccb57ad283

Domain Name Analysis

Within the Iranian country-code top-level domain (.ir), 'sap.ir' is registered with no subdomain. Count 3 characters in 'sap' containing one vowel alongside 2 consonants. Segmentation suggests one word: sap. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.33s

Total Load Time

2.0 MB

Total Size

Language Analysis

Primary Language

🇮🇷Persian

Code: fa

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:fa-IR

Text Length:14,230 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software97% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

97%

corporate business

94%

government public service

66%

documentation technical

58%

corporate

35%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
22	178.63.174.118	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
22	142.251.110.97Google · CDN	United States	AS15169Google LLC
22	216.239.34.36Google · CDN	United States	AS15169Google LLC
22	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
22	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
22	216.239.32.36Google · CDN	United States	AS15169Google LLC
132	6	-	-