Security Scan: User verification...

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3886d5af-6b7b-413a-a1cf-ff350e0970c9 Domain and IP registration (RDAP)/api/v1/rdap/3886d5af-6b7b-413a-a1cf-ff350e0970c9 Certificate Transparency/api/v1/ct/stankoff.ru How often this domain was scanned/api/v1/domain/stats/stankoff.ru Scan history for this domain/api/v1/domain/history/stankoff.ru?limit=15

This website contacted 9 IPs in 4 countries across 8 domains to perform 25 HTTP transactions. The main domain is stankoff.ru.

Submitted URL: https://www.stankoff.ru

AI Security Verdict

Moderate Risk

Confidence: 68%

Risk Score

A long-established domain now serves a KillBot 'verification' gateway whose scripts POST to unranked .ru endpoints and known-attacker kill-bot hosts — a compromised-site redirect/malware-routing pattern, not the site's real content.

Risk Factors (5)

Legitimate long-established domain appears hijacked to host a KillBot-branded verification/redirect gateway

Page scripts POST to and fetch from unranked domains flagged in threat-intel as known attacker infrastructure

Numeric .ru redirect endpoint (10052024.ru/c.php) consistent with cloaking/TDS rather than normal site functionality

Six chained cross-domain redirects with no legitimate purpose on this domain

KillBot naming on a machine-tool company's domain is a strong indicator of injected/compromised content

Safety Factors (5)

Domain is 28 years old (registered 1998) — well-established infrastructure, suggesting compromise rather than a purpose-built scam domain

No credential, password or payment fields (0 forms parsed), so no direct credential harvesting

No JavaScript malware YARA hits, no kit-roster match, no Safe Browsing hit

Third-party scripts served from top-1M ranked hosts (Yandex Metrica) — normal site tooling alongside the anomaly

Established domain (10236 days old) with no strong malicious indicators — risk clamped from 7 to 5

Domain age information unavailable

Details

Page Title

User verification...

Scan Type

public

Favicon Hash

MMH3: 1659581338

MD5: c416cb744f23bf7d4b036d312d5fe898

Domain Name Analysis

The domain 'www.stankoff.ru' uses the Russian country-code top-level domain (.ru); it also runs on subdomain 'www'. Count 8 characters in 'stankoff' split between 2 vowels and 6 consonants. Tokenizing the label suggests 2 words: stank, off. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.78s

Total Load Time

134 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:54%

Script:Latin

Direction:ltr

Detection Details

Text Length:286 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software65% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

65%

news media journalism

60%

documentation technical

52%

e-commerce shopping

46%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	194.67.100.247	Russia	AS197695Domain names registrar REG.RU, Ltd
2	31.192.105.204	Moscow, Moscow, Russia	AS50867Hostkey B.v.
2	212.41.11.153	Moscow, Moscow, Russia	AS50340JSC Selectel
2	147.93.136.189	St Louis, Missouri, United States	AS40021Contabo Inc.
2	194.233.71.78	Singapore, Singapore	AS141995Contabo Asia Private Limited
2	77.88.21.119Yandex · CLOUD	Moscow, Moscow, Russia	AS13238YANDEX LLC
2	190.115.31.218	United Arab Emirates	AS59692IQWeb FZ-LLC
2	87.250.250.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
2	87.250.251.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
25	9	-	-