ScanMalware.com

Security Scan Report: class.act.edu.et

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/46c3a12d-7508-4c93-83c7-e244b39bda5fDomain and IP registration (RDAP)/api/v1/rdap/46c3a12d-7508-4c93-83c7-e244b39bda5fHow often this domain was scanned/api/v1/domain/stats/class.act.edu.etScan history for this domain/api/v1/domain/history/class.act.edu.et?limit=15
This website contacted 48 IPs in 7 countries across 31 domains to perform 280 HTTP transactions. The main domain is act.edu.et.

Submitted URL: https://class.act.edu.et/?post_id=SURGA22

AI Security Verdict

High Risk

Confidence: 80%

7
Risk Score

Educational LMS subdomain is serving a cloned Booking.com page with Indonesian gambling SEO spam (SURGA22); no credential/payment capture, but clear brand impersonation and likely host compromise.

Risk Factors (4)
Brand impersonation of Booking.com on an unrelated education subdomain.
Full Booking.com content clone on class.act.edu.et, indicating content injection or a compromised host.
Indonesian gambling-related SEO spam keywords (SURGA22) unrelated to the claimed academic LMS.
Mismatch between title/meta declaring an American College LMS and visible/OG content presenting Booking.com.
Domain age information unavailable

Details

Page Title

SURGA22 : American College of Technology LMS Platform Pembelajaran Online

Scan Type

public

Domain Name Analysis

Within the Ethiopian country-code top-level domain (.edu.et), 'class.act.edu.et' is registered with subdomain 'class'. The registrable portion 'act' spans 3 characters split between 1 vowel and 2 consonants. Segmentation suggests one word: act. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Booking.com IDR =~ @® _Daatarkan properti Anda ( 4 Akomodasi ) > Penerbangan @, Penerbangan+Hotel © € Rentalmobil RB Atraksi wisata Taksi bandara ©, sakarta x Waktu check-in Aea.na€) Waktu che Q 2...

Page Load Overview

36.35s
Total Load Time
7.6 MB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:id
Text Length:7,231 chars
Detector Agreement:80%

Website Classification

Primary Category

education45% confidence
Type: spa
Method: ml+structural

All Detected Categories

education
45%
education learning
33%

Detected Features

Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
45164.160.187.150Ethiopia
AS24757Ethio Telecom
5150.171.28.10Azure · CLOUDUnited States
AS8075Microsoft Corporation
5182.22.24.252Japan
AS23816LY Corporation
5142.251.110.97Google · CDNUnited States
AS15169Google LLC
5192.178.183.113Google · CDNUnited States
AS15169Google LLC
599.84.152.98Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
5104.18.86.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5178.250.1.12France
AS44788Criteo Technology SAS
552.222.136.97Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
5104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
28048--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T124D47D65A604643F51878384A9376727B36F44BDBE3A87E0BB5DCB7107C6DC8DA1B880

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:jeASUISVaaz6n34DeMmiJMAgN7Rv8tpI8F/vOz6:juB1nviwaJW6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:642999:BRHoIJJ8KHXhAIASRTpCWCALZAI6tQitKSQKgUASA8Gh6BgYAAEABAp0oGAACQCSoXZoXfbUAAgi0EAhMVCyQwIANYh0ALIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffc7c7c7c7
Perceptual Hash:b44b16365bdf3034
Difference Hash:dde1a72b2e2f2c2d
Wavelet Hash:0000ffff87878787
Color Hash:N/A

Other Hashes

Crop Resistant:dde1a72b2e2f2c2d,dcdcc1dbe8c9e7e7,fffffff3f7fffffa,da92cad3a5e6b69b

Scan History

Scan history not available

Unable to load historical scan data