ScanMalware.com

Security Scan Report: l25mn-raaaa-aaaal-asylq-cai.icp0.io

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3d7a4f4e-3546-4604-aeaf-67e78bbc7cecDomain and IP registration (RDAP)/api/v1/rdap/3d7a4f4e-3546-4604-aeaf-67e78bbc7cecHow often this domain was scanned/api/v1/domain/stats/l25mn-raaaa-aaaal-asylq-cai.icp0.ioScan history for this domain/api/v1/domain/history/l25mn-raaaa-aaaal-asylq-cai.icp0.io?limit=15
This website contacted 2 IPs in 2 countries across 2 domains to perform 26 HTTP transactions. The main domain is icp0.io and was registered 4 years 2 months ago.

Submitted URL: https://l25mn-raaaa-aaaal-asylq-cai.icp0.io/

AI Security Verdict

Low Risk

Confidence: 58%

3
Risk Score

Self-branded crypto bot dashboard on a shared ICP gateway with no forms and no malware. Only mild concerns: an unranked throwaway Cloudflare-tunnel data endpoint and unverified operator identity; abuse-reputation tags carry no content-malware evidence.

Risk Factors (2)
Crypto trading-bot dashboard on a shared platform gateway with no verifiable operator identity or contact/legal pages
Page JavaScript fetches live data from an ephemeral, unranked Cloudflare quick-tunnel domain with no relationship to the page's own domain
Safety Factors (6)
No credential-harvesting, login, or payment forms anywhere on the page (0 forms, 0 password fields, 0 payment fields)
No JavaScript malware, obfuscation, hidden iframe, or credential exfiltration detected
No brand impersonation — the page displays its own project name and links to its own site (aperunners.com)
No network-level IDS alerts, no kit-roster match, no high-precision hunting-rule hits
Hosting gateway domain has been registered/operating for about 4 years
Verdict names no specific threat, and DOM analysis found no password field (real or disguised) or payment field and no other hard signal — elevated score unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

Ape Runners — Bot Dashboard (ICP)

Scan Type

public

Domain Name Analysis

The domain 'l25mn-raaaa-aaaal-asylq-cai.icp0.io' uses the British Indian Ocean Territory country-code top-level domain (.io), featuring subdomain 'l25mn-raaaa-aaaal-asylq-cai'. Its registrable label 'icp0' stretches across 4 characters split between 1 vowel and 2 consonants, notching one digit. It segments into 2 words: icp, 0. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://l25mn-raaaa-aaaal-asylq-cai.icp0.io/

Page Load Overview

0.25s
Total Load Time
24 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:511 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software57% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
57%
cryptocurrency blockchain
49%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13212.71.124.188Langnau am Albis, Zurich, Switzerland
AS24951EveryWare AG
13195.5.171.242United States
AS398485DFINITY USA Research, LLC
262--

Detected Technologies1

HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10602B6B9127632329073E9D170EA873A29E4CD1BCD4354A13BECC2518BCEE94BDB056C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:TWK+a55mC71LN2HNJqhUYeTWZfqZKqZqqZ7qZFzkFKf00u/4/5NhnD/uaxaA1TSv:2aFlwPsEa6tN2Qm5HnDGaxL1m/Ec

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8270:gFUooOEDQHCBKHJWRGCAqVVIDJoiBoLhIIOhAQYwYhAACIvBkDVxFASAQUaIBEqCSEcKGlCQeIirUECDJ4DgAlHHhIjAANGv

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:187e6c7e3c000000
Perceptual Hash:c1c91c3c1d69697d
Difference Hash:32d0c0c070040000
Wavelet Hash:98fe7e7e7e000000
Color Hash:N/A

Other Hashes

Crop Resistant:32d0c0c070040000

Scan History

Scan history not available

Unable to load historical scan data