Security Scan: CyberLeek

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2199acca-3c5f-4715-8348-e7950eab8590 Domain and IP registration (RDAP)/api/v1/rdap/2199acca-3c5f-4715-8348-e7950eab8590How often this domain was scanned/api/v1/domain/stats/cyberleek.arwe.io Scan history for this domain/api/v1/domain/history/cyberleek.arwe.io?limit=15

This website contacted 14 IPs in 3 countries across 6 domains to perform 28 HTTP transactions. The main domain is arwe.io and was registered 2 months ago.

Submitted URL: https://cyberleek.arwe.io/

AI Security Verdict

Low Risk

Confidence: 68%

Risk Score

Self-branded activist/extortion page (no forms, no impersonation, no wallet connect) that solicits Monero and pushes opaque .zip downloads via anonymous mirrors while loading a resource with a malware-typed threat-intel hit — avoid.

Risk Factors (5)

Distributes opaque .zip archives through an anonymous file-sharing mirror with no provenance or checksums

Requests Monero payments to a Session contact for 'advertising space' and deals — anonymous, non-reversible, unverifiable

Content is an extortion-style manifesto threatening disruption of third-party companies

Loads a Solana RPC endpoint reported as 'fakeapp (malware)' by two independent threat-intel feeds

Young (74-day-old) unranked domain hosting this material

Safety Factors (6)

No credential, login, password or payment forms on the page (verified: 0 forms, 0 sensitive fields) — not a phishing page

Site uses its own brand (CyberLeek matches the domain), no impersonation of another organisation detected

No JavaScript hunting rule malware, no kit-roster hit, no Safe Browsing alert, no cross-origin credential exfiltration

The 'wallet drainer / impersonates Raydium' scanner alert is not supported by evidence: no wallet connect, no approval request, only outbound links to DEX aggregators and public RPC endpoints

Only network IDS alerts are MEDIUM informational (ZeroSSL certificate observation)

No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no hunting rule / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 7 to 3

Domain age information unavailable

Details

Page Title

CyberLeek

Scan Type

public

Favicon Hash

MMH3: -760898256

MD5: 52d934e07448ea63b82de1b63a120535

Domain Name Analysis

Domain 'cyberleek.arwe.io' uses the British Indian Ocean Territory country-code top-level domain (.io); it also runs on subdomain 'cyberleek'. The second-level label 'arwe' is 4 characters long with 2 vowels and 2 consonants. Splitting it apart reveals two words: ar, we. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.91s

Total Load Time

296 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:12,949 chars

Detector Agreement:75%

Website Classification

Primary Category

forum community discussion65% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

forum community discussion

65%

documentation technical

58%

adult content

40%

government public service

35%

entertainment media

26%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	216.150.1.1Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	64.130.57.92	Frankfurt am Main, Hesse, Germany	AS20326TeraSwitch Networks Inc.
2	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
2	148.51.214.9	Phoenix, Arizona, United States	AS12025Iron Mountain Data Center
2	88.99.216.186	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
2	35.214.244.104Google · CDN	Groningen, Groningen, Netherlands	AS15169Google LLC
2	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	216.150.1.65Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	216.150.16.65Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
28	14	-	-