Security Report: bornapos.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ae184cd0-9a94-4fa4-a365-770ae47536d6 Domain and IP registration (RDAP)/api/v1/rdap/ae184cd0-9a94-4fa4-a365-770ae47536d6How often this domain was scanned/api/v1/domain/stats/bornapos.com Scan history for this domain/api/v1/domain/history/bornapos.com?limit=15

This website contacted 2 IPs in 1 country across 2 domains to perform 136 HTTP transactions. The main domain is bornapos.com and was registered 1 year ago.

Submitted URL: https://bornapos.com

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Legitimate-looking Iranian POS store whose pages carry an analyst-vetted IClickFix/EtherHiding ClickFix loader hidden in obfuscated script — visitors are exposed to a malware-dropping kit; avoid.

Risk Factors (6)

Known malicious kit (IClickFix ClickFix / EtherHiding loader) injected into the page — analyst-vetted ground truth

EtherHiding: payload stage address fetched from a blockchain contract, a technique used to evade takedown

Obfuscated JavaScript hiding connections to threat-feed-listed hosts (1rpc.io, gateway.tenderly.co, sepolia.gateway.tenderly.co)

Single-source malware loader indicator on the primary domain

Anti-analysis behavior (right-click disabled)

Domain is unranked in Cisco Umbrella and shows weak legitimacy signals, consistent with a small site that has been compromised rather than a curated scam, but the injected kit still endangers visitors

Domain age information unavailable

Details

Page Title

صفحه اصلی برناپوز - bornapos

Scan Type

public

Favicon Hash

MMH3: 134887870

MD5: e49ee639bc056d8917da37dd4c01b8f5

Domain Name Analysis

The domain 'bornapos.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'bornapos' is 8 characters long containing three vowels alongside 5 consonants. Splitting it apart reveals two words: born, apos. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.