Security Scan Report: getty.ir

Redirected to:
https://domaina.ir/domains/getty.ir
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 10 HTTP transactions. The main domain is getty.ir.

Submitted URL: https://getty.ir/sti/panel/admin.php

Effective URL:
https://domaina.ir/domains/getty.ir
Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Redirects from a malware-flagged getty.ir admin path to a domaina.ir domain-sale page. Served content is a benign offer form with no credential or payment fields, but the single-source malware report on the exact URL keeps risk elevated.

Risk Factors (4)
Threat-intel malware report naming both the host getty.ir and the exact scanned URL path (single-source community feed, unverified)
Suspicious /udu/panel/admin.php path on the entry host suggests an abandoned or previously compromised administrative endpoint
Cross-domain redirect from getty.ir to domaina.ir, so the entry domain's reputation does not describe the content actually served
Contact-details collection form (name, phone, email) on a domain-sale offer flow hosted on a different, unrated domain
Safety Factors (6)
No password, payment or disguised credential fields anywhere on the page
Cross-origin form posting is reported as a legitimate SSO/redirect flow, not credential exfiltration
No obfuscated or malicious JavaScript, no WebAssembly findings, no native hunting-rule hits
No network IDS phishing/malware alerts and no known-kit roster match
Page presents its own brand ('دومینا') matching the final domain domaina.ir; theGetty.ir mention is the product being sold, not brand impersonation
No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no hunting rule / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable

Details

Page Title

دومینا

Scan Type

public

Domain Name Analysis

You're looking at domain 'getty.ir' on the Iranian country-code top-level domain (.ir) while skipping any subdomain. The second-level label 'getty' is 5 characters long split between 1 vowel and four consonants. Breaking it apart gives one word: getty. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

دومينا دريارة ما 3 دامتدى ‎Getty.ir‏ مىتوائد ‎sly‏ شما باشد فروش دامنه ‎Getty.ir‏ در سايت دومينا آموزشها ‎Sil‏ مقالات ‎Sil‏ مقالات كسب درآمد از دومينا ليب مقالات Getty. ir Domainay ‏دومينا‎...

Page Load Overview

0.63s
Total Load Time
272 KB
Total Size

Language Analysis

Primary Language

🇮🇷Persian
Code: fa
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:fa
Text Length:823 chars
Detector Agreement:50%

Website Classification

Primary Category

blog personal website84% confidence
Type: static
Method: ml+structural

All Detected Categories

blog personal website
84%
government public service
55%
education learning
54%
adult content
42%
news media journalism
37%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8172.67.159.2Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.58.103Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
104--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18F430B7892F152F8445B8174B6B07B36F91BC78BC68A9BD6B29D41A06FD3CE4AC071C4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:3304SLBrePKG3Aiock+wJRan7YYTXqyoIztPUzthI0+xWZLfg8bvD4bsbHTbYbCn:38G7YYrqItPUzthI0Si48AQ/UGIO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:56575:FQgDBFDUcLAqAUmJ3gZ2EAdhOBwCFIVBQAiOAQRKRXEEQoJDRRLICABQqSMFBaPAN4sgcAQhgioQFgCgCOEABQKSErXN6CAK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bfe7e7e7e7cbc3c3
Perceptual Hash:f3c699cc23278d89
Difference Hash:400c080c08161616
Wavelet Hash:38e6e6e6e6c2c2c2
Color Hash:07001000043

Other Hashes

Crop Resistant:400c080c08161616

Scan History

Scan history not available

Unable to load historical scan data