Security Report: im30.net - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/aec85e97-a48e-44f2-a2a5-a0261edc3c6a Domain and IP registration (RDAP)/api/v1/rdap/aec85e97-a48e-44f2-a2a5-a0261edc3c6aHow often this domain was scanned/api/v1/domain/stats/im30.net Scan history for this domain/api/v1/domain/history/im30.net?limit=15

This website contacted 9 IPs in 4 countries across 6 domains to perform 41 HTTP transactions. The main domain is im30.net and was registered 11 years ago.

Submitted URL: https://im30.net

Effective URL:

https://www.im30.net/en/

Redirected

The Cisco Umbrella rank of the primary domain is #976,783 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Legitimate 11-year-old IM30 game site, but network evidence shows it is compromised and serving ClearFake/EtherHiding malware (critical IDS exfil alert, blockchain C2 calls, injected malicious resource). Do not interact until cleaned.

Risk Factors (4)

CRITICAL IDS detection of EtherHiding exfiltration malware traffic from the page

Blockchain RPC connection plus Ethereum contract request consistent with ClearFake/EtherHiding C2 retrieval

Injected third-party resource from checkyoubrowse.codes, a host flagged by 2 independent threat feeds

Primary domain and related domains carry malware-family threat-intelligence labels (iclickfix, unknown loader)

Domain age information unavailable

Details

Page Title

IM30 – Make Time More Interesting-北京龙创悦动网络科技有限公司

Scan Type

public

Favicon Hash

MMH3: -475618226

MD5: 0dd99743606cca90f03a18fafd81e14c

Domain Name Analysis

The domain 'im30.net' uses the network infrastructure generic top-level domain (.net) without a subdomain. The core label 'im30' covers 4 characters with one vowel and one consonant, along with 2 digits. Splitting it apart reveals two words: im, 30. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

75.11s

Total Load Time

1.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:46%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN

Text Length:3,847 chars

Detector Agreement:60%

Language mismatch: Declared as zh-CN but detected as en

Website Classification

Primary Category

documentation technical71% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

71%

government public service

61%

real estate property

57%

adult content

51%

blog personal website

43%

Detected Features

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	43.109.179.64	Singapore	AS24429Zhejiang Taobao Network Co.,Ltd
4	123.206.83.125	Beijing, Beijing, China	AS45090Shenzhen Tencent Computer Systems Company Limited
4	163.181.254.191	United States	AS24429Zhejiang Taobao Network Co.,Ltd
4	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	14.215.182.140	China	AS4134Chinanet
4	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
4	163.181.254.192	United States	AS24429Zhejiang Taobao Network Co.,Ltd
4	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	183.240.98.228	China	AS56040China Mobile communications corporation
41	9	-	-