Security Scan Report: wamproperties.com

Submitted: Sep 17, 2026, 12:47:34 PMCompleted: Sep 17, 2026, 12:48:04 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Hijacked/repurposed aged domain posing as the KRAKEN darknet market, promoting illegal narcotics with Tor mirrors and gambling spam; primary domain flagged malicious by two threat-intel feeds.

Risk Factors (5)
Multi-source Indicators of Compromise match on the primary domain
Brand impersonation of the KRAKEN darknet marketplace on an unrelated hijacked property domain
Promotion of illegal drug marketplace and Tor-only mirror links
Injected spam links to gambling, casino and steroid-sales sites
Domain not present in Cisco Umbrella top 1M despite 18-year registration — old domain repurposed
Domain age information unavailable

Details

Page Title

KRAKEN ДАРКНЕТ КРАКЕН ССЫЛКА ТОР ЗЕРКАЛО

Scan Type

public

Domain Name Analysis

Domain 'wamproperties.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The core label 'wamproperties' covers 13 characters with five vowels and eight consonants. Tokenizing the label suggests three words: w, am, properties. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://wamproperties.com

Page Load Overview

0.45s
Total Load Time
12 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:2,743 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping77% confidence
Type: static
Method: ml+structural

All Detected Categories

e-commerce shopping
77%
cryptocurrency blockchain
72%
finance banking
64%
news media journalism
55%
education learning
55%

Detected Features

OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1160.153.0.124Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
1172.67.180.48Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.43.137Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
33--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F0127263878814950206B056EC48FA0CFC7A69FF7A2F97112BD4277E36E15B0D6BD389

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:O9aif9ap9akK9aFAM9an0msK7QA1Ns9PAOc+d72/Scfn/Qz9cLU:iai1avaPaRa0mKBPAOc+d7nSYzOLU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9151:QRThO0CsADAvAqKMwSISQKEIAhnRIpAIlIg2VQ0EJAKEBUSCIijhgJBFwCEeKBsABEKWUBSCGMIoSleAHQAInhEEHQIFpYBC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0f03670f07ffffff
Perceptual Hash:9133bf99198dc4e4
Difference Hash:785fcef899800000
Wavelet Hash:0f00630000ffffff
Color Hash:#d22da1

Other Hashes

Crop Resistant:785fcef899800000

Scan History

Scan history not available

Unable to load historical scan data