Security Scan Report: amesf.ac.ir

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 93 HTTP transactions. The main domain is amesf.ac.ir.

Submitted URL: https://amesf.ac.ir

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

Legitimate-looking Iranian university site with no forms or malicious script on the page, but a single-source unverified threat-intel report labels the domain an 'unknown stealer' and it links to a flagged domain.

Risk Factors (3)
Single-source, unverified threat-intel report labeling the primary domain as an 'unknown stealer' (malware)
Outbound link to danas.ir, reported as 'iclickfix' malware in the same single-source feed
Neither threat-intel match is multi-source corroborated, so attribution remains unconfirmed
Domain age information unavailable

Details

Page Title

صفحه اصلی - دانشگاه المهدی مهر اصفهان

Scan Type

public

Domain Name Analysis

The domain 'amesf.ac.ir' uses the Iranian country-code top-level domain (.ac.ir) and has no subdomain. Its registrable label 'amesf' stretches across 5 characters holding 2 vowels versus three consonants. Tokenizing the label suggests two words: ames, f. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

fe) le Ubjgal duawge a's, uleel eo gage Wye 533; Sass 9 appt opie jSy0 = GHEY + epihjgal glne,S > Wesglan «> albslaajlys > cunlyanjg> Golan : = bgrislo diiga lS & We . ubsadils —agygilause —— oa...

Page Load Overview

24.62s
Total Load Time
10.0 MB
Total Size

Language Analysis

Primary Language

🇮🇷Persian
Code: fa
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:fa-IR
Text Length:7,592 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service95% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
95%
education learning
86%
news media journalism
84%
corporate business
84%
finance banking
79%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21185.143.233.133Arvancloud · CDNIran
AS205585Noyan Abr Arvan Co. ( Private Joint Stock)
18185.143.234.133Arvancloud · CDNIran
AS205585Noyan Abr Arvan Co. ( Private Joint Stock)
18142.251.13.95Google · CDNUnited States
AS15169Google LLC
18192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
18142.251.110.95Google · CDNUnited States
AS15169Google LLC
935--

Detected Technologies14

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15574B7917E762436312F62CFD0072B1C6287EFDBC755AAE5F2F20121D2B2D9436D2698

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:CfFypOOhRuZN48g7Ch+5pHk1RUkJgHIUz8KW4PqMXVHX2flqOYPUc9vAtEsp7GP/:CfAcObilqSvSH+r38SejnTmaeyssL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:346075:FGASBMsCHMwERwkpqAEiIBUFIMQEgFJDYCIAbA4gmIGbxI1IJQIGQAQUzClAhBKAAQlJEXdeWYnAJImahTgcCQoWWpAJEIka

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fdffebc1c1c1ffe1
Perceptual Hash:f38c8e3361846b9d
Difference Hash:492913571b191509
Wavelet Hash:98ffc1c1c1c1e5e1
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data