Security Scan Report: bicda.com.bd

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 3 countries across 4 domains to perform 13 HTTP transactions. The main domain is bicda.com.bd.

Submitted URL: https://bicda.com.bd

AI Security Verdict

Confirmed Scam

Confidence: 96%

9
Risk Score

Legitimate-looking 'under development' WordPress site whose page is compromised and serves the Macfinger ClickFix AMOS stealer loader; critical hunting rule and IDS malware hits. Do not visit or paste anything it shows.

Risk Factors (5)
Compromised WordPress site serving an injected ClickFix/AMOS stealer loader
CRITICAL malware hunting rule matches on the page HTML
CRITICAL network IDS malware alert for the AMOS ClickFix campaign
Cross-origin beacon to an unranked, rotating attacker-controlled script host
macOS visitors are reportedly shown a fake bot-protection page prompting ClickFix paste-and-run instructions
Domain age information unavailable

Details

Page Title

BICDA – Just another WordPress site

Scan Type

public

Domain Name Analysis

The domain 'bicda.com.bd' uses the Bangladeshi country-code top-level domain (.com.bd) and has no subdomain. The second-level label 'bicda' is 5 characters long holding 2 vowels versus 3 consonants. Segmentation suggests 2 words: bic, da. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Welcome to BICDA WEBSITE UNDER DEVELOPMENT President Welcome to BICDA WEBSITE UNDER DEVELOPMENT President “oe £ a‘ J TA, oar alos | Bangladesh Inland Container Depots Associasion RBPI(C DRA

Page Load Overview

5.46s
Total Load Time
668 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:210 chars
Detector Agreement:75%

Website Classification

Primary Category

government public service42% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
42%
technology software
38%
cryptocurrency blockchain
37%
finance banking
30%
healthcare medical
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3118.67.222.6Dhaka, Dhaka Division, Bangladesh
AS58923InterCloud ltd
2192.178.183.95Google · CDNUnited States
AS15169Google LLC
279.137.248.195Helsinki, Uusimaa, Finland
AS210644Aeza Group LLC
2142.251.20.94Google · CDNUnited States
AS15169Google LLC
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
2142.251.110.94Google · CDNUnited States
AS15169Google LLC
136--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CB03C732A17484B93E1F87BD81947318B944EA05CB06A7F9B0F9E16899D8DFB04B770D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:yjCVdNJ6Ih7Zr7ZdSZUaAVYMIu3MnDkeEO9nR5zVdJRrmS15EZ2TWu6J+ME0vWC3:ACVTZdypwYMIu3MndjL72dJ+b0vLBD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:40951:UQlBImTkJjBscAUKszAiQEhoP2XGTYFgLpAMJqIwgsolyEkIAC0Q0ERiCkAQkKSlKo8SMARQIKIQgnXoC4Bh2MAaNH5hRIQA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7ffefffe7e7c3c3
Perceptual Hash:f7cf3836cc30c324
Difference Hash:0c0c0c084c4c8e96
Wavelet Hash:26262626e2c2c2c2
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data