Security Scan Report: apexforge.best

Submitted: Completed: publiccompleted
This website contacted 19 IPs in 7 countries across 17 domains to perform 41 HTTP transactions. The main domain is apexforge.best and was registered 3 months ago.

Submitted URL: https://apexforge.best/

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Fake 'Blizzard/BC.Game' lucky-wheel prize page on an unranked 94-day-old domain, harvesting email/username/Telegram and flagged by critical Darksword exploit-kit alerts and a malware threat-intel match.

Risk Factors (5)
Brand impersonation of Blizzard Entertainment on a domain that does not belong to it
Exploit-kit IDS alerts (Darksword iOS RCE loader/worker/module) — critical severity
Threat-intelligence match naming the primary domain as malware (coruna/darksword)
Fake prize-wheel reward lure collecting email, username and Telegram
Unranked, recently registered domain with no affiliation to the brands it displays
Domain age information unavailable

Details

Page Title

Blizzard - Lucky Wheel

Scan Type

public

Domain Name Analysis

You're looking at domain 'apexforge.best' on the .best top-level domain. The core label 'apexforge' covers 9 characters split between 4 vowels and 5 consonants. Splitting it apart reveals 2 words: apex, forge. Expect 4.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

B BC.Game LUCKY WHEEL Both new and existing users can enjoy the lucky wheel rewards 4 $ $ $ * Be eé . 4e | ss 4% $s 4 et $F : 4 £ + Hop Mee, get an en se ©, A id Vorsstous, on *Shoig? * 2 Chip . 5...

Page Load Overview

3.65s
Total Load Time
644 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:42%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:670 chars
Detector Agreement:40%
Language mismatch: Declared as zh-CN but detected as en

Website Classification

Primary Category

entertainment media40% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
545.142.142.155Romania
AS39287Materialism s.r.l.
2142.251.20.110Google · CDNUnited States
AS15169Google LLC
2188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.20.97Google · CDNUnited States
AS15169Google LLC
2185.111.111.156Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
231.220.27.155Amsterdam, North Holland, Netherlands
AS39572DataWeb Global Group B.V.
2142.251.14.110Google · CDNUnited States
AS15169Google LLC
231.220.27.135Amsterdam, North Holland, Netherlands
AS39572DataWeb Global Group B.V.
2188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.41.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4119--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T169C2A76928F7422111A311E6A7F7AB0DB87491036900C85471FDC3896FDEF9B5AA37EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:OLTw0+BGD5K/T0J2rcUavLe0mrVprEHa+5+oxYggYbjQVdQaXQZQbK8/f:E0AD5vytW+ozcoag6bf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:27794:IE1hCWgXRCAAhRAEqAEFKXGgMDhAHgIZxAm4sIQiHCHgAEnwCXANxJlBGY0ioQoUkoDUjCEgoGCaU0DILolCAAghC3CTipLg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:181800181818ffff
Perceptual Hash:8879e618b7cc32e6
Difference Hash:3131313131317165
Wavelet Hash:1919111919197fff
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data