Security Scan: نرم افزار حسابداری پیمانکاری و ساختمان سازی ن

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/26b74bb8-4503-477e-8413-3a6495665f91 Domain and IP registration (RDAP)/api/v1/rdap/26b74bb8-4503-477e-8413-3a6495665f91How often this domain was scanned/api/v1/domain/stats/novin-sakht.ir Scan history for this domain/api/v1/domain/history/novin-sakht.ir?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 40 HTTP transactions. The main domain is novin-sakht.ir.

Submitted URL: https://novin-sakht.ir

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Legitimate-looking accounting-software site whose page has been compromised with an analyst-vetted IClickFix ClickFix/EtherHiding malware loader (CRITICAL hunting-rule hit) that pulls a stage from a blockchain contract. Do not interact.

Risk Factors (5)

Injected ClickFix/EtherHiding malware loader (Ethereum Sepolia contract stage) targets Windows visitors

High-precision hunting-rule match for a known malicious kit on the captured HTML

Obfuscated script only reveals its blockchain RPC hosts after decoding

Right-click blocked and one anti-analysis technique, consistent with a compromised/malicious page

Indicators of Compromise report the primary domain as a malware loader

Domain age information unavailable

Details

Page Title

نرم افزار حسابداری پیمانکاری و ساختمان سازی نوین ساخت+دمو رایگان

Scan Type

public

Favicon Hash

MMH3: -1328605772

MD5: 4b96e1d28f605d4a6d13c49a5ef29d10

Domain Name Analysis

The domain name 'novin-sakht.ir' uses the Iranian country-code top-level domain (.ir) with no subdomain. The core label 'novin-sakht' covers 11 characters containing three vowels alongside seven consonants; it also includes one hyphen. Tokenizing the label suggests three words: novin, sak, ht. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.