Security Scan Report: q65784.quizgo.me

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 4 countries across 8 domains to perform 16 HTTP transactions. The main domain is quizgo.me and was registered 5 years ago.

Submitted URL: https://q65784.quizgo.me/

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Anonymous quiz-funnel page promising to recover money 'lost to scam brokers' and harvesting name/email/phone from prior fraud victims. No company identity, no technical malware hits — but the pitch matches advance-fee recovery scams. Do not submit details.

Risk Factors (5)
Offers to recover money from 'scam brokers' — a service category dominated by advance-fee recovery fraud
Solicits personal contact details (name, email, phone) from victims of prior fraud
Complete absence of corporate identity, registration, legal or contact information
Promotional funnel hosted on a numeric subdomain of a quiz/lead-generation platform, not a business site
Language designed to build trust with already-defrauded users ('no prepayment', 'free consultation')
Domain age information unavailable

Details

Page Title

QuizGO

Scan Type

public

Domain Name Analysis

You're looking at domain 'q65784.quizgo.me' on the Montenegrin country-code top-level domain (.me) and includes subdomain 'q65784'. Count 6 characters in 'quizgo' with 3 vowels and 3 consonants. Word splitting yields two words: quiz, go. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Bo3BpatT fever oT 6pokepa MoweHHNkKa, 6e3 npegonsatp!! Nonyunte oTBeT, BO3MOXHO JIM BEPHYyTb Balin cpepctBa. Onnata ycnyr TosbKo No dakTy Bo3BpaTa Bawux fener! wv NOJIYYNTb BECIJIATHYIO KOHCYJIBTA...

Page Load Overview

6.67s
Total Load Time
993 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:1,860 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking76% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
76%
phishing scam
62%
government public service
61%
adult content
59%
blog personal website
58%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
880.71.150.47Ust-Kamenogorsk, East Kazakhstan, Kazakhstan
AS41798JSC Transtelecom
194.131.191.1Kazakhstan
AS215013Yandex.Cloud LLC
1157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
174.125.29.95Google · CDNUnited States
AS15169Google LLC
192.53.68.16St Petersburg, St.-Petersburg, Russia
AS49505JSC Selectel
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
1157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
1104.26.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
169--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13893B5A24068142F002B51D1F4767E1D36E9B56BF645CB2DCCFD8F97E7D68A0A22630B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:2T/Q3EQ3f+qNcUQ3HUQ3f+qNcUQ3HZaJgZiMnvkReRSRiRmRWRFlcwAes2:2Tc+qNcPH+qNcPZa9uEGCyeuFlFAc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:94136:IDIoEABCoFRgDEAMYCBjZCSkwIpNAFgGBAiBbIkBOIRoUJQEl0hQDNiVfSOBKFxKPTCAaFEoFkBkUCCABEChQJjAGkBQxfAI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:37271f2763e76767
Perceptual Hash:a38cb6e1609edc39
Difference Hash:6d6c6fedcbcbcccc
Wavelet Hash:37270f0761e70727
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data