ScanMalware.com

Security Scan Report: ruler.online

Redirected to: https://ruler.online/login

Site favicon
Submitted: Jan 3, 2026, 5:39:49 PMCompleted: Jan 3, 2026, 5:41:18 PMpubliccompleted
Loading additional data...

Summary

This website contacted 13 IPs in 2 countries across 10 domains to perform 46 HTTP transactions. The main domain is ruler.online and was registered NaN years ago.

Submitted URL: https://ruler.online

Effective URL: https://ruler.online/loginRedirected

The Cisco Umbrella rank of the primary domain is #945,799 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 75%

5
Risk Score

Login form collects passwords without a username, indicating possible credential harvesting.

Risk Factors
Password field without accompanying username/email field
Low ranking for a domain presenting a login interface
Safety Factors
Domain age is over 8 years (well‑established)
No malicious Indicators of Compromise matches found
No payment fields or external links detected
Domain age information unavailable

Details

Page Title

Login | RULER

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

The domain name 'ruler.online' uses the modern generic top-level domain (.online) without a subdomain. The core label 'ruler' covers 5 characters holding 2 vowels versus three consonants. Splitting it apart reveals 1 word: ruler. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ruler.online

Page Load Overview

5.00s
Total Load Time
35
HTTP Requests
10
Domains
735 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:415 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11142.250.186.168United States
AS15169GOOGLE
254.231.234.209Ashburn, Virginia, United States
AS16509AMAZON-02
2104.17.24.14United States
AS13335CLOUDFLARENET
2216.239.34.36United States
AS15169GOOGLE
216.182.66.24Germany
AS14618
2184.24.77.144Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
234.120.195.249Kansas City, Missouri, United States
AS396982GOOGLE-CLOUD-PLATFORM
254.231.160.185GermanyUnknown
2100.50.92.27Ashburn, Virginia, United States
AS14618AMAZON-AES
252.71.66.202Ashburn, Virginia, United States
AS14618AMAZON-AES
3513--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10603790669754DAF5C462301FD18BE05A1C57187F2502CB5E1FCCEABA2DE7CBAA6201F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:MGifOsBM/kyS3J2JdnNzDR5DyDuXHWxJitVngzJDKZAggDyDuXHWxJitVngzJDKO:EOsBM/kl3oPRDRYlzJclzJV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:40269:wQkHyBPvBE5BAIA4hYuIFSyUIDHGh4gbEJWTAgIQDqYEBgFUEegEKGSg2EWExAUEMYoHAuKgF4IHDoLunplYiAAAYwpbECtY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3f3f3f3f3f3f3f
Perceptual Hash:87fc9207649b994d
Difference Hash:6c66686666e06aec
Wavelet Hash:2733232323373f33
Color Hash:#d22dac

Other Hashes

Crop Resistant:989ca09e8e808498,60b4c4a5a4ec629a

Scan History

Scan history not available

Unable to load historical scan data