ScanMalware.com

Security Scan Report: weex168.ru

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1beb5349-75e9-451f-bd9a-a342d08a57d2Domain and IP registration (RDAP)/api/v1/rdap/1beb5349-75e9-451f-bd9a-a342d08a57d2How often this domain was scanned/api/v1/domain/stats/weex168.ruScan history for this domain/api/v1/domain/history/weex168.ru?limit=15
This website contacted 54 IPs in 7 countries across 29 domains to perform 872 HTTP transactions. The main domain is weex168.ru and was registered 1 year ago.

Submitted URL: https://weex168.ru

The Cisco Umbrella rank of the primary domain is #940,490 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

3
Risk Score

Page claims to be the WEEX crypto exchange but runs on weex168.ru, not WEEX's own domain, and offers an APK download — brand impersonation with likely malware distribution.

Risk Factors (5)
Brand impersonation of WEEX exchange on a domain (weex168.ru) that is not the brand's official domain
APK download link (huawei-variants.apk) hosted on third-party CDN offered from a clone exchange page
Six chained cross-domain redirects
Outbound link to a domain reported (single-source, unverified) as phishing
Low domain reputation (#940,490) inconsistent with the global brand it claims to be
Safety Factors (4)
Domain registered ~378 days ago (not a freshly created throwaway)
No credential or payment forms detected on the page (0 password, 0 payment, 0 forms)
No YARA malware patterns, no credential exfiltration, no disguised password fields
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 3
Domain age information unavailable

Details

Page Title

WEEX | Crypto, Stocks, Gold & Global Markets

Scan Type

public

Domain Name Analysis

Domain 'weex168.ru' uses the Russian country-code top-level domain (.ru) with no subdomain. The registrable portion 'weex168' spans 7 characters containing two vowels alongside 2 consonants; bonus characters include 3 digits. Tokenizing the label suggests 3 words: we, ex, 168. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://weex168.ru

Page Load Overview

15.43s
Total Load Time
23.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,336 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain57% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
57%
corporate
25%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
24138.113.69.133Meteverse · CDNFrankfurt am Main, Hesse, Germany
AS54994Meteverse Limited.
16180.97.198.41China
AS140292CHINATELECOM Jiangsu province Suzhou 5G network
1618.66.92.123Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1643.159.95.211Singapore
AS139341ACE
16216.198.53.3Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
16192.178.183.94Google · CDNUnited States
AS15169Google LLC
16162.62.10.47Moscow, Moscow, Russia
AS132203Tencent Building, Kejizhongyi Avenue
1618.245.46.101Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
16142.251.127.84Google · CDNUnited States
AS15169Google LLC
162.16.168.53Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
87254--

Detected Technologies5

Open-Graph-Protocolvwebsite
100%
Zendesk
20%
Yandex.Metrika
20%
Google Sign-in
20%
Apple Sign-in
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E7E4C51AB109DF15E872DD4DF57EAE7AA08DF07686F05438F39CCD1802E14B857AB982

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:Rdk4xjxoSLGCS602wvFsGW4gWKCxYVO9zhAd/:RJxlLGWQDKKz9id/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:672700:ExUzyi9EgAKkmUBC0ICYEikIEFgUrcRMCiuxRyIwScSowxJeYqEWCgDAMICMHAgBDSUJAQdJAwYoZtRfiAAESBWBxYABIS1D

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:38fefe7e18100300
Perceptual Hash:84d03b2f5f2d6c29
Difference Hash:b0c8b4f47162cee7
Wavelet Hash:7efeff7e18100300
Color Hash:#ac539c

Other Hashes

Crop Resistant:b0acccb436a6f4f0,a0d282327282e2a0,a280c0969680a2a2,a08a864c4e828aa0,b0c8b4f47162cee7

Scan History

Scan history not available

Unable to load historical scan data