Security Scan Report: pensa.ir

Redirected to:
https://pensa.ir/fa
Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 4 domains to perform 68 HTTP transactions. The main domain is pensa.ir.

Submitted URL: https://pensa.ir/

Effective URL:
https://pensa.ir/fa
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Legitimate-looking Iranian door/window manufacturer page, but its primary domain carries a single-source, unverified wallet-drainer phishing report; treat as high risk pending verification.

Risk Factors (3)
Primary domain matches a content-malware threat-intel report (wallet drainer/phishing), albeit single-source and unverified
Three INFO-level IDS heuristics for likely JavaScript obfuscator usage (informational, not sufficient alone)
Two eval() calls in page scripts (common in frameworks; meaningful only with other evidence)
Domain age information unavailable

Details

Page Title

پنسا | تولیدکننده درب، پنجره و نما (UPVC، آلومینیوم، کرتین‌وال)

Scan Type

public

Domain Name Analysis

The domain 'pensa.ir' uses the Iranian country-code top-level domain (.ir) without a subdomain. Its registrable label 'pensa' stretches across 5 characters holding 2 vowels versus three consonants. Tokenizing the label suggests 2 words: pens, a. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pensa.ir/

Page Load Overview

0.33s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇮🇷Persian
Code: fa
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:fa-IR
Text Length:5,735 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical97% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
97%
real estate property
64%
government public service
52%
corporate business
48%
corporate
35%

Detected Features

Articles
OG: homepage
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16185.143.233.132Arvancloud · CDNIran
AS205585Noyan Abr Arvan Co. ( Private Joint Stock)
13185.143.234.132Arvancloud · CDNIran
AS205585Noyan Abr Arvan Co. ( Private Joint Stock)
13142.250.154.97Google · CDNUnited States
AS15169Google LLC
13194.62.17.30Iran
AS57497Faraso Samaneh Pasargad Ltd.
1345.135.243.142Iran
AS57497Faraso Samaneh Pasargad Ltd.
685--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15783B6A093E445334263D2C639A13B38AAA3EE07C566850475AD33A40FDBE53DB5B5EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:n46Y34TalBUTeUCgmo4CLFcfgnu8MF30yZsRutTRnssseVUWX5TsTEDr8A:NY34TalBUcwjKrkyXssse+W5TsTA8A

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:83512:SoTj1KYIhBCiywEuI0kFBNpaxEyELnKRhAqQ7CUQjUoHEwUKZBBBBWIskpA1hUgwAjAkCMFgE1UBxylPEBghRJYLVEYEHgCk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffe7e3fbe3
Perceptual Hash:e918694c92cde6bc
Difference Hash:3b1b1658cecbd38b
Wavelet Hash:d900c3ef6f617161
Color Hash:#bc79d2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data