Security Scan Report: drsmarinegroup.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 5 domains to perform 67 HTTP transactions. The main domain is drsmarinegroup.com and was registered 22 years ago.

Submitted URL: https://drsmarinegroup.com/lok/Panel/PvqDq929BSx_A_D_M1n_a.php

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate 22-year-old marine services domain appears compromised: the requested /lok/Panel/...php path and the primary domain are flagged as lokibot malware by multiple independent feeds. Do not interact with this URL.

Risk Factors (4)
Content-malware Indicators of Compromise (lokibot) on the primary domain from multiple independent feeds
Direct URL match flagged as malware at the exact /lok/Panel/ path requested
Panel-style PHP path consistent with a Lokibot C2/stealer panel, indicating the legitimate site is compromised
Unranked domain despite 22-year registration history — reputation does not mitigate the active malware indicator
Domain age information unavailable

Details

Page Title

Page Not Found - Drs Marine Groupother network

Scan Type

public

Domain Name Analysis

You're looking at domain 'drsmarinegroup.com' on the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'drsmarinegroup' is 14 characters long holding five vowels versus 9 consonants. Word splitting yields 4 words: dr, s, marine, group. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

& drs@drsmarinegrouy 9 CBD Belapur Navi Mumbai, 400 61. oJ +91 (22) 27563530 FollowUs f @ in Home About Us Our Services Vessel Types Our Training Application Form Contact Us Q RMs > DRS Marine Servi...

Page Load Overview

10.44s
Total Load Time
4.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,626 chars
Detector Agreement:95%

All Detected Languages

🇺🇸en(98%)🇮🇩id(2%)

Website Classification

Primary Category

social media network82% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
82%
news media journalism
42%
corporate
35%
blog personal website
34%
documentation technical
25%

Detected Features

OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
59162.241.114.21Phoenix, Arizona, United States
AS19871Network Solutions, LLC
13104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13142.251.110.94Google · CDNUnited States
AS15169Google LLC
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1151.158.44.107Bangladesh
AS138145Web Host BD
675--

Detected Technologies14

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11863097264B41477368A96EC52A97314AE95D043CE0ACFA576FC13AC8FC6DE604F360E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:SJVypEHG+wfFLAiAyalhjSFgto6GLi9j6/IWJzNnWvW1+8Rq:SJQIG+wptATho6GLsj6/IWJzNnWO1+8I

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:67458:QIF8QPkKQAMrgVAIaDB8RKFAAJO4OCWsSjDQiUCW00nHoKgKRCi4SiGDHIByshWShoMoiEeZQIgCuaDSFcASViCBEcBzOAgC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c000307fffffff7
Perceptual Hash:a61cd3c9e636364c
Difference Hash:4c50bf4d070b0a0c
Wavelet Hash:00000007ffffefe7
Color Hash:07001008006

Scan History

Scan history not available

Unable to load historical scan data