Security Report: khanemohandesi.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ab219f8a-afad-4127-bb79-bfcba4325b47 Domain and IP registration (RDAP)/api/v1/rdap/ab219f8a-afad-4127-bb79-bfcba4325b47How often this domain was scanned/api/v1/domain/stats/khanemohandesi.com Scan history for this domain/api/v1/domain/history/khanemohandesi.com?limit=15

This website contacted 3 IPs in 2 countries across 3 domains to perform 58 HTTP transactions. The main domain is khanemohandesi.com and was registered 2 years 8 months ago.

Submitted URL: https://khanemohandesi.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Compromised engineering site serving an analyst-vetted IClickFix EtherHiding loader; obfuscated script hides threat-feed hosts and 7 critical ClickFix malware IDS alerts fire. Do not visit.

Risk Factors (5)

Known malicious ClickFix/EtherHiding kit injected into the page (analyst-vetted kit roster, CRITICAL)

Obfuscated JavaScript concealing threat-intel-listed hosts and reading a next-stage payload from a blockchain smart contract (EtherHiding)

Critical network IDS alerts for malware/ClickFix C2 infrastructure (7 CRITICAL)

Threat-intel match on the primary domain khanemohandesi.com (unknown loader, single-source)

Outbound link to novindevs.com, flagged as an unknown loader (single-source)

Domain age information unavailable

Details

Page Title

صفحه اصلی - خانه مهندسی

Scan Type

public

Favicon Hash

MMH3: -1385122494

MD5: 970e9c64528d0a848b87dc6f973a6a3f

Domain Name Analysis

The domain name 'khanemohandesi.com' uses the commercial generic top-level domain (.com) without a subdomain. The core label 'khanemohandesi' covers 14 characters containing six vowels alongside 8 consonants. Segmentation suggests four words: khan, e, mohan, desi. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

uk 2 INU bung pads Olasd ah) yy WF Aolg al bole jas gains ails Spd ghyed pect BQrohaitier band © info@khanemohar oYFFFAIM & © Lebyolss aah Sty baaigye WA Jl — asrige GE @ (gl43,> ylwsdigo col Ip (g...

Page Load Overview

4.61s

Total Load Time

917 KB

Total Size

Language Analysis

Primary Language

🇮🇷Persian

Code: fa

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:fa-IR

Text Length:5,710 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical96% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

96%

government public service

73%

adult content

53%

corporate business

52%

news/blog

35%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
20	195.28.10.32	Iran	AS212216Netafraz Iranian Ltd.
19	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
19	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
58	3	-	-