ScanMalware.com

Security Scan Report: shahabnetco.ir

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/271e8117-1fd4-43db-ac29-dd4c01bab897Domain and IP registration (RDAP)/api/v1/rdap/271e8117-1fd4-43db-ac29-dd4c01bab897How often this domain was scanned/api/v1/domain/stats/shahabnetco.irScan history for this domain/api/v1/domain/history/shahabnetco.ir?limit=15
This website contacted 29 IPs in 2 countries across 9 domains to perform 148 HTTP transactions. The main domain is shahabnetco.ir.

Submitted URL: https://shahabnetco.ir

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Multi-source threat intel reports this primary domain as malware, and its scripts connect to several BSC testnet RPC nodes. Aged, self-branded Iranian tax/IT-services site, but the corroborated malware IoC drives a high-risk rating; avoid submitting data.

Risk Factors (2)
Threat-intelligence match on the primary domain: reported as malware by two independent feeds
Page injects/calls multiple BSC blockchain testnet RPC nodes, an unusual pattern for an Iranian tax/IT-services site that the scanner associates with wallet-drainer activity
Domain age information unavailable

Details

Page Title

صفحه اصلی - مرکز جامع امورمالیاتی

Scan Type

public

Domain Name Analysis

Within the Iranian country-code top-level domain (.ir), 'shahabnetco.ir' is registered without a subdomain. Its registrable label 'shahabnetco' stretches across 11 characters containing 4 vowels alongside seven consonants. It segments into 4 words: shah, ab, net, co. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

od wile SLI bo 590! aol> 55 0 (03055 LoS 4511 $54 & bai p0 deel 9 Sle 40) 99 39) 429 Jol

Page Load Overview

12.99s
Total Load Time
2.5 MB
Total Size

Language Analysis

Primary Language

🇮🇷Persian
Code: fa
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:fa-IR
Text Length:5,829 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software92% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
92%
government public service
81%
finance banking
79%
documentation technical
77%
education learning
55%

Detected Features

Articles
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
889.32.250.172Geneva, Geneva, Switzerland
AS204213Netmihan Communication Company Ltd
5192.0.73.2San Francisco, California, United States
AS2635Automattic, Inc
5104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
53.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
552.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
53.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
515.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14829--

Detected Technologies11

WordPressv7.1.3
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
LiteSpeed
50%
Litespeed Cache
40%
HTTP/3
40%
WooCommerce
20%
Slider Revolution
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19F244DB23A1C7076110B754F906A7A5C978B9D3DDAD5B2B0B3FF420C87A1E9217412DE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:5yZA/2AjAHRAQfpAvE9bpV98lZ4PzjahD7P8YGOdcGdRY7JcRvPqx5iue3XzLF0U:DDsaKAKbn98lCPz6HxcGdRY7JcRvyfw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:217499:CohAMBByCgFErAEKaANFiBRizIiVEpRFCtESJeRAERgCAOARAEoAh8HAAAGFKGkiEhBYREEEJxARkEgipBILyFgDGFJEihAh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff010f31170070f0
Perceptual Hash:cab4c7c4e4c73895
Difference Hash:d65958e5b551c141
Wavelet Hash:ff000f514f2171f9
Color Hash:N/A

Other Hashes

Crop Resistant:7b73636c6968686b,d65958e7b451c141

Scan History

Scan history not available

Unable to load historical scan data