← Back to Home

Is directdebit.bmi.ir/auth/login Safe? 70/100 Trust Score

Website: directdebit.bmi.ir/auth/login

Screenshot of directdebit.bmi.ir/auth/login

Safety Score

70/100
⚠ Warning

This website appears legitimate based on AI analysis.

AI Analysis Results

Category: Financial Services
About this website:

Detailed Analysis Report: Is directdebit.bmi.ir Safe and Legit? Website Overview and Purpose directdebit.bmi.ir is a banking portal that claims to facilitate direct debit transactions for customers of Bank Melli Iran . The site appears to offer services related to account management and direct debit authorizations, targeting users who wish to manage their banking transactions online. Content Quality and User Experience Key Experience Highlights Login options for users with Bank Melli credentials and direct debit authorization. Instructions for new users to register and create login credentials. Security tips advising users to verify the URL before entering sensitive information. Contact information for customer support is provided, including a support phone number. Claims Verification and Red Flags ⚠️ Red Flags Detected The website raises several concerns regarding its legitimacy and security practices: Brand Impersonation: The site claims to represent Bank Melli Iran but operates under a subdomain that does not match the official domain of the bank. Credential Harvesting: The presence of a login form requesting sensitive information raises significant security concerns. Unverified Domain: The domain's age and registration details are unclear, which is suspicious for a financial service. SSL Certificate: While the site uses SSL, this does not guarantee legitimacy, especially in phishing scenarios. Missing Transparency: There is a lack of verifiable company information or regulatory details that would typically accompany a legitimate banking service. ⚠️ Caution Points Users should avoid entering personal or financial information unless they can verify the site's authenticity. Always check the official website of Bank Melli Iran for secure access to banking services. Security Note: The site uses an SSL certificate issued by Certum Organization Validation CA, which is valid but does not confirm the site's legitimacy. Legitimacy and Reputation Assessment The domain directdebit.bmi.ir is a subdomain of bmi.ir, which is associated with Bank Melli Iran. However, the lack of clear ownership and the suspicious nature of the login request raise concerns. The site does not appear to have a significant online presence or reputation, as indicated by its absence from major ranking systems. Final Verdict and Recommendations Conclusion: The website directdebit.bmi.ir is likely a phishing site attempting to harvest credentials from users of Bank Melli Iran. Users should exercise extreme caution and refrain from entering any personal information. It is advisable to access banking services directly through the official Bank Melli Iran website to ensure security and legitimacy.

Risk Assessment: safe
⚠️ Red Flags:
  • [GUARDRAIL] Subdomain inheriting trust from parent domain bmi.ir (score: 100/100) - applied without DNS verification (parent score 90+)
  • [PHISHING] Brand impersonation detected | The site claims to represent Bank Melli Iran but uses a subdomain that does not match the official domain | Evidence: Content claims and URL structure
  • [SECURITY] Credential harvesting risk | The site requests sensitive information through a login form | Evidence: Login page content
  • [TRANSPARENCY] Missing company information | No verifiable details about the organization behind the site | Evidence: Lack of 'About Us' or contact information
  • [SECURITY] SSL certificate does not guarantee legitimacy | The site uses SSL but is still suspicious | Evidence: SSL details provided
📊 Analysis Reasons:
  • [CLAIMS] The site claims to be a direct debit service for Bank Melli Iran but operates under a subdomain that does not match the official bank domain.
  • [SECURITY] The presence of a login form requesting sensitive information indicates potential credential harvesting.
  • [TRANSPARENCY] Lack of verifiable company information or regulatory details typically associated with legitimate banking services.
  • [SECURITY] The SSL certificate is valid but does not guarantee the site's legitimacy, especially in phishing scenarios.
  • [DOMAIN HISTORY] The domain's age and registration details are unclear, raising suspicions about its legitimacy.
🏢 Brand Evidence:
  • Website title includes 'بانک ملی ایران'
  • Content mentions 'سامانه برداشت مستقیم - بانک ملی ایران'
  • Login options for users with Bank Melli credentials
🛡️ Safety Actions Applied:
  • {"type":"subdomain_inheritance","reason":"Subdomain inheriting trust from parent domain bmi.ir (score: 100/100) - applied without DNS verification (parent score 90+)","scoreCeiling":null,"targetStatus":"safe"}
Score Source: openai_guardrail
AI Confidence: high

Technical Details