Security Scan Report: norustco.ir

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 6 HTTP transactions. The main domain is norustco.ir.

Submitted URL: https://norustco.ir

AI Security Verdict

Moderate Risk

Confidence: 68%

4
Risk Score

Self-branded industrial IoT/cathodic-protection site with its own same-origin operator login and no impersonation or malware evidence; only concern is a Spamhaus DROP IDS alert on the hosting IP.

Risk Factors (1)
Network IDS alert: ET DROP Spamhaus DROP Listed Traffic Inbound (hosting IP is on the Spamhaus DROP list, likely a shared VPS neighbour)
Safety Factors (5)
Self-branding detected — page title and meta match the domain it is served from
Password field is part of the site's own same-origin dashboard login, not a disguised or cross-origin credential capture
No payment fields and no credit-card collection of any kind
No content-malware indicators of compromise, no hunting-rule hits, no phishing-kit roster match
Static assets served from well-known CDNs (jsdelivr, cdnjs.cloudflare.com)
Domain age information unavailable

Details

Page Title

NoRust Co. - Cathodic Protection & IoT Systems

Scan Type

public

Domain Name Analysis

The domain name 'norustco.ir' uses the Iranian country-code top-level domain (.ir) and has no subdomain. The second-level label 'norustco' is 8 characters long holding three vowels versus five consonants. Tokenizing the label suggests three words: no, rust, co. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

NoRust Co. Services Products AboutUs Contact Us 9) Login / Dashboard Cathodic Protection loT GPRS | MQTT Real-Time Telemetry & Control Advanced Cathodic Protection & Transformer Rectifier Monitorin...

Page Load Overview

1.52s
Total Load Time
596 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,623 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
262.60.191.197Iran
AS213852Tose'e Shabakeh Azad Ltd
1151.101.129.229Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
65--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17F43881071F181BB6C7366B8A39AA60D7F29E05FC91BDAACB5CC41219FC29F5CDC6214

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:F8jCHMngR3e9tLnsSOfpBJv0ryfg7+bjlw5lkZaNCOIkfJ5UsoLb98XsHdG5ZRbL:Ne9hnsSOfpBJKVIkfJ5UsoFHdG5/Ey

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:55864:IQJIi/LkRApZRgQhYISDQGUCphfQQmKABQCqDm2eApAGTAQQgAQE8TBiEAaJ2iMhiVBFiN4UjkNEkJaJyEg0kiwAI1AJJ81K

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffbd3d3d19000010
Perceptual Hash:8a973134b4b3d6cc
Difference Hash:94716179b1253171
Wavelet Hash:ff7f3d3d19011101
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data