ScanMalware.com

Security Scan Report: rail-news.ir

Site favicon
Submitted: Sep 20, 2026, 7:05:12 PMCompleted: Sep 20, 2026, 7:05:39 PMpubliccompleted

AI Security Verdict

Safe Website

Confidence: 88%

1
Risk Score

Established Persian railway news site with self-branding matching its domain, no forms collecting credentials/payment, and no Indicators of Compromise, YARA, or IDS hits. Legitimate.

Safety Factors (6)
Established domain age (1038 days / ~2.8 years)
Self-branding consistent with domain (news site's own name)
No credential or payment collection forms
No threat-intelligence, YARA, or IDS matches
Recognized Iranian media trust seal present
Editorial news content with multiple bylines/topics, not a single-purpose phishing page
Domain age information unavailable

Details

Page Title

اخبار راه آهن ایران

Scan Type

public

Domain Name Analysis

The domain name 'rail-news.ir' uses the Iranian country-code top-level domain (.ir) while skipping any subdomain. The second-level label 'rail-news' is 9 characters long holding three vowels versus 5 consonants, plus 1 hyphen. Tokenizing the label suggests two words: rail, news. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rail-news.ir

Page Load Overview

4.39s
Total Load Time
5.7 MB
Total Size

Language Analysis

Primary Language

🇮🇷Persian
Code: fa
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:fa-IR
Text Length:24,817 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service49% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
49%
documentation technical
45%
corporate
35%
news media journalism
32%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1545.159.149.232Iran
AS60631Vandad Vira Hooman LLC
14142.251.110.155Google · CDNUnited States
AS15169Google LLC
1445.147.77.128Iran
AS51889Gostaresh Pardazesh Dana Negar Co.(PJSC)
14142.251.127.156Google · CDNUnited States
AS15169Google LLC
14142.251.127.157Google · CDNUnited States
AS15169Google LLC
14142.251.127.155Google · CDNUnited States
AS15169Google LLC
14142.251.127.154Google · CDNUnited States
AS15169Google LLC
14142.251.14.156Google · CDNUnited States
AS15169Google LLC
14142.251.110.132Google · CDNUnited States
AS15169Google LLC
14142.251.14.157Google · CDNUnited States
AS15169Google LLC
14110--

Detected Technologies9

WordPressv7.0.5
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
LiteSpeed
40%
HTTP/3
40%
Google AdSense
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T153827572E0A841667F5EC7BDC1D1B238A568BA05DD06776670F43168CAD8AF700F721E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:0VyzES4xJ0kK9aTD6Z+mOxQtwqNrqwRXdSZsTaAY1TNslQCfEGHRmy4kWSN:DES4xfK9cmFwwr/ZdSZUaAKkWSN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18465:QAABothwKCgjjr2ABJCRsGyUhEjAiZS6gAEAgsKoCumUIEhBukElJQ2mkxwhgSFu0DMAWiQLhNAAAECmsdCQYoxaAAsgAmnI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:feffffffffffffff
Perceptual Hash:d555555555555515
Difference Hash:0000000000000000
Wavelet Hash:0e0e0e0e0e0e0e0e
Color Hash:#4e783a

Other Hashes

Crop Resistant:0000000000000000

Scan History

Scan history not available

Unable to load historical scan data