Security Scan Report: kovachevpress.com

Redirected to:
https://kovachevpress.com/bg/ads/Panel/PvqDq929BSx_A_D_M1n_a.php
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 3 domains to perform 13 HTTP transactions. The main domain is kovachevpress.com and was registered 21 years ago.

Submitted URL: https://kovachevpress.com/ads/Panel/PvqDq929BSx_A_D_M1n_a.php

Effective URL:
https://kovachevpress.com/bg/ads/Panel/PvqDq929BSx_A_D_M1n_a.php
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Established press domain is flagged by 2 feeds as Lokibot malware and hosts an obfuscated PHP panel path; likely a compromised site serving malware infrastructure, so avoid it despite the 404 page.

Risk Factors (3)
Primary domain carries a content-malware (Lokibot) threat-intel match from two feeds
Deep, obfuscated PHP panel URL on an otherwise ordinary press/news domain
Domain is unranked in Cisco Umbrella despite being 21 years old, so the compromise is not visible in reputation data
Domain age information unavailable

Details

Page Title

404 - Грешка: 404other network

Scan Type

public

Domain Name Analysis

You're looking at domain 'kovachevpress.com' on the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'kovachevpress' is 13 characters long split between 4 vowels and nine consonants. It segments into 4 words: kovac, he, v, press. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

< Go Back to Homepage

Page Load Overview

1.16s
Total Load Time
405 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:76%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:bg-bg
Text Length:127 chars
Detector Agreement:100%
Language mismatch: Declared as bg-bg but detected as en

Website Classification

Primary Category

news media journalism48% confidence
Type: static
Method: ml+structural

All Detected Categories

news media journalism
48%
adult content
42%
government public service
31%
documentation technical
29%
healthcare medical
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8172.67.217.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.21.75.91Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
1157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
134--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19A81601D1CC1B5EB73B64E41B02321625856800FFEB3BEB8B0ADC5717BA84984CD759E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:7I+n1Z5qaDUeKO3wnKKNNaN6dx1RODjLKRTe7GQ:BLEaoE3AvFd/RujLKRTez

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4043:CBCERgEggAAAQ4BNQIAQEIIEoQEIElQAAAFAIACI4SARgEEMBAAMBDAAACAAAAhARAQgAhAACAAhAA0KQAgBIBYSOIASBSAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7e7ffff
Perceptual Hash:e6cc9933cc2633cc
Difference Hash:00000c0c040c0000
Wavelet Hash:3c3c242403270f0f
Color Hash:070000001c0

Other Hashes

Crop Resistant:00000c0c040c0000

Scan History

Scan history not available

Unable to load historical scan data