Security Scan Report: rain-buy-and-sell-bitcoin.apk.cafe

Redirected to:
https://apk.cafe/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 75 IPs in 11 countries across 85 domains to perform 187 HTTP transactions. The main domain is apk.cafe and was registered 2 years ago.

Submitted URL: https://rain-buy-and-sell-bitcoin.apk.cafe/

Effective URL:
https://apk.cafe/
Redirected

The Cisco Umbrella rank of the primary domain is #576,117 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

APK download directory reached via a spam-style subdomain that a single unverified source reports as phishing. No credential or payment forms, hunting rule or IDS hits found, but the deceptive redirect and phishing report warrant caution.

Risk Factors (4)
Scanned host reported as phishing by a single, unverified community source
Deceptive, spam-generated subdomain name unrelated to the destination site's subject matter
Redirect from the spam subdomain to a separate main domain, a common SEO/manipulation funnel
APK file distribution site with low domain reputation (rank ~576K)
Safety Factors (6)
Main domain apk.cafe is approximately 2 years old (registered 2024-10-07) and not newly created
No password, disguised-password or payment fields anywhere on the page
No JavaScript malware detection, no high-precision native-hunting-rule hits, no network IDS alerts
No credential exfiltration detected; cross-origin requests limited to an analytics endpoint
Page displays its own brand (apk.cafe), not another organisation's branding
Established domain (752 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Android cafe download free Apks files

Scan Type

public

Domain Name Analysis

Within the .cafe top-level domain, 'rain-buy-and-sell-bitcoin.apk.cafe' is registered, featuring subdomain 'rain-buy-and-sell-bitcoin'. The core label 'apk' covers 3 characters split between 1 vowel and 2 consonants. Word splitting yields two words: a, pk. Median word length is 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rain-buy-and-sell-bitcoin.apk.cafe/

Page Load Overview

26.96s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:76,207 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software41% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
41%
government public service
27%
documentation technical
25%

Detected Features

Search
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
39193.42.111.101Amsterdam, North Holland, Netherlands
AS601443W Infra B.V.
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
2142.250.154.157Google · CDNUnited States
AS15169Google LLC
2104.21.13.188Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.14.97Google · CDNUnited States
AS15169Google LLC
2151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
2142.251.110.94Google · CDNUnited States
AS15169Google LLC
2193.42.111.109Amsterdam, North Holland, Netherlands
AS601443W Infra B.V.
23.174.46.107Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2142.251.14.138Google · CDNUnited States
AS15169Google LLC
18775--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A575842BF4E21A37D3A685E49267773C7B79C91E9FC10C708883277E4786DE6160918E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:a1Gyd5t2g4UDcpTNuYO0WzHYi0mzDYA0czze4204MTVADcpTNpYv0fzvY+0azVYK:9G0g

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1551730:yDHJOgi8AGElF2gxFuIABVIUCMBJIA6hUYKIC14MABRQAILCBGUTUAyGBIkk49MADoukaBYArJwjkH0AeAOiygpAYizENSql

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff20000f1f05
Perceptual Hash:9ce7b8c37e83a882
Difference Hash:ae32a04444d9bcbd
Wavelet Hash:cfffff20000d1f01
Color Hash:#6653ac

Other Hashes

Crop Resistant:ae32a04444d9bcbd

Scan History

Scan history not available

Unable to load historical scan data