Security Report: bimerland.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cafe525f-ffff-4516-8f6d-1433b0655008 Domain and IP registration (RDAP)/api/v1/rdap/cafe525f-ffff-4516-8f6d-1433b0655008How often this domain was scanned/api/v1/domain/stats/bimerland.com Scan history for this domain/api/v1/domain/history/bimerland.com?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is bimerland.com and was registered 11 months ago.

Submitted URL: https://bimerland.com

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Compromised car-repair site (bimerland.com) carrying an IClickFix/EtherHiding loader: CRITICAL YARA rule hit plus a malware threat-intel match on the primary domain. No credential forms, but the injected script must not be run.

Risk Factors (5)

Known malicious kit (IClickFix / EtherHiding loader) injected into the page

CRITICAL YARA malware rule match in page JavaScript

Threat-intel malware indicator on the primary domain (single-source, unverified)

Right-click / context-menu blocking as anti-analysis behavior

Machine-learning classifier flags phishing scam (61%)

Domain age information unavailable

Details

Page Title

مرکز تعمیرات تخصصی خودروهای خارجی - بیمرلندother network

Scan Type

public

Domain Name Analysis

The domain 'bimerland.com' uses the commercial generic top-level domain (.com). Its registrable label 'bimerland' stretches across 9 characters with three vowels and six consonants. Tokenizing the label suggests three words: bi, mer, land. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.23s

Total Load Time

0 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:68%

Script:Latin

Direction:ltr

Detection Details

Text Length:69 chars

Detector Agreement:100%

Website Classification

Primary Category

phishing scam61% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

phishing scam

61%

documentation technical

40%

technology software

40%

download file sharing

38%

government public service

38%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	185.8.174.149	Iran	AS60631Vandad Vira Hooman LLC
1	185.239.1.100	Iran	AS202269BitCommand LLC
2	2	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B7B4D972764E553A279F419BD0603D8CE00BA977C6C5E6E0F7B389C8EBE0C927642974

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:TRd0I0cEdGwzK71jTspXp22wB5ogDjHOgblW1zkSivLLdyf2hQQznG+51BrU58Nc:TRd0I0HdPzK7uo2wBckUP9sUNpSkV6Y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:520305:AQGAGJNwCGaKAZKeATjKQCIxIEoTCsNFQaUZEVhPMQCAwCFAGGEISQKudNAGUVkUUqwHECCRQAEAKDgGwBvMDAMlFQNQAbEM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff040e0430783e04

Perceptual Hash:82e9bcc4e992e996

Difference Hash:d55cdcddc5e1ec7d

Wavelet Hash:ff0c0f0d70787e01

Color Hash:#6ce08b

Other Hashes

Crop Resistant:d55cdcddc5e1ec7d,ffffffffffffffff,d5dcccdcc5e0ec7d

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: bimerland.com