ScanMalware.com

Security Scan Report: morskirai.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/14d96751-65c5-405b-9e31-8da7c9d34a75Domain and IP registration (RDAP)/api/v1/rdap/14d96751-65c5-405b-9e31-8da7c9d34a75How often this domain was scanned/api/v1/domain/stats/morskirai.comScan history for this domain/api/v1/domain/history/morskirai.com?limit=15
This website contacted 20 IPs in 2 countries across 8 domains to perform 74 HTTP transactions. The main domain is morskirai.com and was registered 10 years ago.

Submitted URL: https://morskirai.com

AI Security Verdict

High Risk

Confidence: 65%

7
Risk Score

Single-source unverified threat intel reports morskirai.com as strelastealer malware. Captured page looks like a legitimate guest house with no forms, but primary-domain malware match forces HIGH_RISK.

Risk Factors (1)
Single-source unverified threat-intel match reports the primary domain as strelastealer malware.
Domain age information unavailable

Details

Page Title

Rado`s Guest House - Лозенец

Scan Type

public

Domain Name Analysis

The domain name 'morskirai.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'morskirai' spans 9 characters holding 4 vowels versus five consonants. Segmentation suggests 3 words: mors, kira, i. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://morskirai.com

Page Load Overview

6.20s
Total Load Time
6.9 MB
Total Size

Language Analysis

Primary Language

🇧🇬BG
Code: bg
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:bg
Text Length:3,496 chars
Detector Agreement:80%

Website Classification

Primary Category

real estate property99% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

real estate property
99%
travel tourism
93%
government public service
87%
finance banking
84%
phishing scam
78%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17164.138.218.50Bulgaria
AS201200SuperHosting.BG Ltd.
3142.251.155.119Google · CDNUnited States
AS15169Google LLC
3172.217.116.4Google · CDNUnited States
AS15169Google LLC
3142.251.154.119Google · CDNUnited States
AS15169Google LLC
3172.217.114.4Google · CDNUnited States
AS15169Google LLC
3172.217.118.4Google · CDNUnited States
AS15169Google LLC
3192.178.170.95Google · CDNUnited States
AS15169Google LLC
3142.251.153.119Google · CDNUnited States
AS15169Google LLC
3142.251.151.119Google · CDNUnited States
AS15169Google LLC
3142.251.156.119Google · CDNUnited States
AS15169Google LLC
7420--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12783845596F318A71007A2996B9F9B197DE2E127D60ACE543BDC13BC9FD6C88883330D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:ONp7I2Wvs64/H+HIHk0k1ag/XxcnWZyE2855UjlSZkltZylMLnla4Rkilo8llMqZ:ONp7I2Wvs64/H9HkRwukof4yxxDFE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:88700:gAMAkCWSJZACIATsYiACiBRBST4SQAAIBERGgIxAjA5AhWwQ2YwFq4JUJBgpLsgyRSN6UBZEgAEHACADBEFiBVEI0MBIBQCh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff060f2e0e0e0600
Perceptual Hash:92ad6d92e9d2c991
Difference Hash:63fcecccccccccbd
Wavelet Hash:ff0f0f3f0f0e0e00
Color Hash:#bf4a40

Other Hashes

Crop Resistant:63fcecccccccccbd,8c8eaa8e8a8e8e8e,8000620d4d400080,ffececccecccccb9

Scan History

Scan history not available

Unable to load historical scan data