Security Scan Report: golshani-crm.ir

Redirected to:
https://golshani-crm.ir/staff/Login.aspx
Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 10 HTTP transactions. The main domain is golshani-crm.ir.

Submitted URL: https://golshani-crm.ir/

Effective URL:
https://golshani-crm.ir/staff/Login.aspx
Redirected

AI Security Verdict

Moderate Risk

Confidence: 52%

4
Risk Score

A Persian-language staff/CRM login panel on its own domain with a same-origin form and no threat-intel, hunting rule or exfiltration evidence. Unverified and unranked, but nothing on the page indicates phishing.

Risk Factors (1)
Login form collecting credentials on an unranked domain of unknown age that cannot be independently corroborated as the operator's own business
Safety Factors (4)
Form posts to a same-origin endpoint (Login.aspx), with no external or cross-origin form action
No credential exfiltration or cross-origin JavaScript network targets detected
No Indicators of Compromise, hunting rule malware, IDS alerts or known phishing kit matches
Page shows its own branding (golshani-crm.ir CRM/staff login) rather than impersonating another entity
Domain age information unavailable

Details

Page Title

ورود به پنل مدیریتother network

Scan Type

public

Domain Name Analysis

The domain name 'golshani-crm.ir' uses the Iranian country-code top-level domain (.ir) and has no subdomain. The second-level label 'golshani-crm' is 12 characters long with 3 vowels and eight consonants, along with one hyphen. Breaking it apart gives four words: gol, shani, cr, m. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Access Denied las eH 6b ssieoals stuawy sb oy Lo

Page Load Overview

1.26s
Total Load Time
63 KB
Total Size

Language Analysis

Primary Language

🇮🇷Persian
Code: fa
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:fa
Text Length:80 chars
Detector Agreement:100%

Website Classification

Primary Category

real estate property62% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

real estate property
62%
technology software
61%
healthcare medical
61%
government public service
46%
social media network
44%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5185.226.142.42Iran
AS34412Saba Abr Mizban LLC
5185.226.140.40Iran
AS34412Saba Abr Mizban LLC
102--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T195418505E9F00C6963110414ACC0793AAEF1DA179289E894B9EC17BC0FE9FC781AB98D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:ewCUYOu04B4pqASoS8usrNt39VQINVwVXyKOLkUA9XNfNvXTUxkbG9LV4A:PGazSoS8usR+1VXLUkjXFt4N9RX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1973:BEAgQAKCAAIAAgIAAQABAGAAAEAEBApQFgAAAFAAAAAAABAgA4EAAQAAAIEAAAAgCAACAAiAgAiAIIAEBAEEAQQEAAAAghBA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7ffe7ffffffff
Perceptual Hash:e666333333338ccc
Difference Hash:4c4c324c30080000
Wavelet Hash:e7e7dbc300000000
Color Hash:N/A

Other Hashes

Crop Resistant:4c4c324c30080000

Scan History

Scan history not available

Unable to load historical scan data