Security Report: kenzax.ir - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e5fed45c-fb7b-4f4f-a778-1f4b354b9a40 Domain and IP registration (RDAP)/api/v1/rdap/e5fed45c-fb7b-4f4f-a778-1f4b354b9a40How often this domain was scanned/api/v1/domain/stats/kenzax.ir Scan history for this domain/api/v1/domain/history/kenzax.ir?limit=15

This website contacted 8 IPs in 3 countries across 8 domains to perform 269 HTTP transactions. The main domain is kenzax.ir.

Submitted URL: https://kenzax.ir

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Established 8-year-old Iranian tool store, but 7 CRITICAL IDS malware alerts (ClickFix domains, EtherHiding exfiltration) and a corroborated malware match on contacted domain zvh4.com indicate the page is serving or loading malware infrastructure. Likely a compromised shop; avoid interacting.

Risk Factors (4)

Critical network IDS malware alerts (ClickFix delivery domains and EtherHiding exfiltration)

Corroborated malware threat-intel match on a resource the page contacts (zvh4.com)

Threat-intel malware (loader) match on the primary domain kenzax.ir (single-source)

Loading blockchain RPC gateway used as EtherHiding/ClickFix malware infrastructure

Domain age information unavailable

Details

Page Title

کنزاکس – ابزار آلات کنزاکس | Kenzax Tools

Scan Type

public

Favicon Hash

MMH3: 957198428

MD5: 3b826be78792064d14639abf10e19461

Domain Name Analysis

The domain name 'kenzax.ir' uses the Iranian country-code top-level domain (.ir) with no subdomain. Count 6 characters in 'kenzax' split between 2 vowels and four consonants. Breaking it apart gives 2 words: ken, zax. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

10.09s

Total Load Time

12.2 MB

Total Size

Language Analysis

Primary Language

🇮🇷Persian

Code: fa

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:fa-IR

Text Length:19,582 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical85% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

85%

social_media

35%

forum

35%

news/blog

20%

Detected Features

Articles

Comments

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
38	91.234.39.16	Iran	AS60631Vandad Vira Hooman LLC
33	87.250.250.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
33	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
33	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
33	87.250.251.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
33	194.62.17.30	Iran	AS57497Faraso Samaneh Pasargad Ltd.
33	77.88.21.119Yandex · CLOUD	Moscow, Moscow, Russia	AS13238YANDEX LLC
33	45.135.243.142	Iran	AS57497Faraso Samaneh Pasargad Ltd.
269	8	-	-