Security Scan Report: linowshahr.com

Submitted: Sep 18, 2026, 4:47:27 PMCompleted: Sep 18, 2026, 4:49:03 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Legitimate-looking Iranian restaurant page, but a CRITICAL ET MALWARE EtherHiding IDS alert, an unexplained blockchain RPC connection, and malware-flagged primary/resource domains indicate hidden malicious content.

Risk Factors (4)
Critical IDS alert for network trojan / EtherHiding exfiltration
Unexplained blockchain RPC connection from a restaurant ordering page
Primary domain reported as a malware loader in threat intelligence
External resource xaz2.com corroborated as malware across two feeds
Domain age information unavailable

Details

Page Title

صفحه اصلی (منو + ثبت سفارش) - linowshahr

Scan Type

public

Domain Name Analysis

You're looking at domain 'linowshahr.com' on the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'linowshahr' stretches across 10 characters containing 3 vowels alongside seven consonants. It segments into three words: li, now, shahr. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://linowshahr.com

Page Load Overview

75.16s
Total Load Time
6.1 MB
Total Size

Language Analysis

Primary Language

🇮🇷Persian
Code: fa
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:fa-IR
Text Length:1,978 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%
news/blog
40%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
31195.28.168.12Iran
AS212216Netafraz Iranian Ltd.
30212.16.67.4Iran
AS34837Institute for Research in Fundamental Sciences
30172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
30188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1214--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16194E8B1765AD96CA01F6BCF40367E3C60479ED5DEA2D6F0E3B24040D1B1CBA3A562D2

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:elr2I8UVajcLH+9HPjci/bvtFgK5C6NuLLOaIK3+0jq:uyFf6o

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:410558:CAAL4DbhWA0ukJ1kQMgjgKBgEIGSgQVcCKbgBCiiIBejMAyBIQALCNCgBqA68YZfB2AAOAOIERJEBMGlwLVa2GAiycAQzwAB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0083b5b1a1df37ff
Perceptual Hash:ae3f39394b525216
Difference Hash:99266d6f2b956575
Wavelet Hash:0083b5b1217f07ff
Color Hash:#e06cbf

Scan History

Scan history not available

Unable to load historical scan data