ScanMalware.com

Security Scan Report: ibt-school.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1129017f-f8fd-4275-a0b3-69f5a86a2caeDomain and IP registration (RDAP)/api/v1/rdap/1129017f-f8fd-4275-a0b3-69f5a86a2caeHow often this domain was scanned/api/v1/domain/stats/ibt-school.comScan history for this domain/api/v1/domain/history/ibt-school.com?limit=15
This website contacted 24 IPs in 3 countries across 11 domains to perform 39 HTTP transactions. The main domain is ibt-school.com and was registered 7 years ago.

Submitted URL: https://ibt-school.com

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Likely a compromised site hosting ClearFake-style malware: obfuscated scripts pull a next-stage payload via EtherHiding from BSC contracts. No credential forms, but visitors risk malware.

Risk Factors (4)
Obfuscated JavaScript hiding connections to malicious/threat-feed-listed hosts
EtherHiding: next-stage payload address retrieved from a smart contract
ClearFake malware family association on the primary domain
Live blockchain RPC connections from page scripts
Domain age information unavailable

Details

Page Title

IBT – Automotive Technology in Santa Clara FF

Scan Type

public

Domain Name Analysis

Domain 'ibt-school.com' uses the commercial generic top-level domain (.com) without a subdomain. Count 10 characters in 'ibt-school' containing three vowels alongside 6 consonants, along with one hyphen. Tokenizing the label suggests two words: ibt, school. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

= INSTITUTE FOR @BPPBUSINESSS Zz TECHNOLOGY Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis n...

Page Load Overview

3.45s
Total Load Time
896 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,769 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical77% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

healthcare medical
77%
technology software
43%
education learning
36%
documentation technical
33%
adult content
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16141.193.213.20Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
1142.251.13.97Google · CDNUnited States
AS15169Google LLC
13.174.46.27Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1142.251.13.95Google · CDNUnited States
AS15169Google LLC
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1142.251.154.119Google · CDNUnited States
AS15169Google LLC
1142.250.154.148Google · CDNUnited States
AS15169Google LLC
1104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
115.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3924--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T121847D76740F103802177169B4CF9C09F859426754E6A0F6F28C8A24BBFE7D8A277B5E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:IMBNyOIO80uEng6DHAyDRuEQTDAGccspnSwzPHCl+sNRhnrWibTewPzd:IMy9OKuDgyDRaDDKp5zPCDJn/e8x

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:400891:AMjulRD+qLFmCjDCA0UhA1poMQFhEAjAgJUiwdIMMXWTEEVGshBA4CIUkkACSMq5IRuYJRJWKAgQFCEh7BBjTTQilgEKAxS0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:b9c19fcffbffffff
Perceptual Hash:e9694b8696969696
Difference Hash:63133a3ad2020800
Wavelet Hash:b9808e82faf2f0f1
Color Hash:N/A

Other Hashes

Crop Resistant:63133a3ad2020800,0b94ccc8e0c4330f

Scan History

Scan history not available

Unable to load historical scan data