Security Scan Report: ahnocarbide.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 19 IPs in 2 countries across 8 domains to perform 304 HTTP transactions. The main domain is ahnocarbide.com and was registered 2 years 6 months ago.

Submitted URL: https://ahnocarbide.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

A genuine Iranian tool-trading site whose pages have been compromised with the analyst-vetted IClickFix/EtherHiding ClickFix kit; multiple CRITICAL IDS alerts and a flagged ClickFix domain mean visitors are served malware.

Risk Factors (5)
Known malicious ClickFix/EtherHiding kit injected into page (IClickFix)
Obfuscated JavaScript hiding blockchain-based stage retrieval and threat-feed C2 hosts
Multiple CRITICAL network IDS malware alerts tied to this page's traffic
Page loads the flagged ClickFix domain zvh4[.]com
Compromised (likely WordPress/WooCommerce) site silently serving malware to visitors
Domain age information unavailable

Details

Page Title

گروه بازرگانی تراش ابزار بهرام

Scan Type

public

Domain Name Analysis

You're looking at domain 'ahnocarbide.com' on the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'ahnocarbide' stretches across 11 characters holding 5 vowels versus six consonants. Breaking it apart gives three words: a, hno, carbide. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

m8 AOD Mex oe® GoewIg az Cuno emus easenl’) mp ee Ep wo cm a 2 SANDVIK| (Cutting Tool Technology DHL PWAVYIAESC sa SYiLes 0gLi) xX coheg suing eS > opt agua goaollel tag Jt day AbehS yas Sandvik...

Page Load Overview

19.82s
Total Load Time
3.5 MB
Total Size

Language Analysis

Primary Language

🇮🇷Persian
Code: fa
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:fa-IR
Text Length:7,320 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content100% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
100%
corporate business
99%
blog personal website
98%
news media journalism
97%
education learning
95%

Detected Features

Login Form
Articles
Products
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16195.28.168.13Iran
AS212216Netafraz Iranian Ltd.
16142.251.150.119Google · CDNUnited States
AS15169Google LLC
16172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16192.178.183.120Google · CDNUnited States
AS15169Google LLC
16172.217.112.4Google · CDNUnited States
AS15169Google LLC
16172.217.117.4Google · CDNUnited States
AS15169Google LLC
16172.217.115.4Google · CDNUnited States
AS15169Google LLC
16172.217.116.4Google · CDNUnited States
AS15169Google LLC
16172.217.118.4Google · CDNUnited States
AS15169Google LLC
30419--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T149C4B622B67A187A513F318FD0513B8DA58BDB73C3E5A7F1B772001966A5C9A3D430E8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:RRdTvNK5wSL7JR51kFFQT/QchzDtReBA7FNIAQfl/Su:RRdnSL7JR51kFFQT/QcNcZlT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:570152:SMUelImAJs0nhuQJBnBBzgBAKmAQLhiUEoEAQI2gDmE5BjkAFLCKREroihgIRSQoYkER5AIQKACrIykSER2YDQxBEgTggFSB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffffffff00
Perceptual Hash:e916699848ed16ed
Difference Hash:33994c0001a80223
Wavelet Hash:0000fefefefe8000
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data