Security Scan: User verification...

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/53684e8a-9c6c-4b78-92ba-3ef8d9698a20 Domain and IP registration (RDAP)/api/v1/rdap/53684e8a-9c6c-4b78-92ba-3ef8d9698a20 Certificate Transparency/api/v1/ct/santehkeram.ru How often this domain was scanned/api/v1/domain/stats/santehkeram.ru Scan history for this domain/api/v1/domain/history/santehkeram.ru?limit=15

This website contacted 9 IPs in 4 countries across 8 domains to perform 25 HTTP transactions. The main domain is santehkeram.ru.

Submitted URL: https://santehkeram.ru

AI Security Verdict

Moderate Risk

Confidence: 68%

Risk Score

Compromised/repurposed 7-year-old domain serving a 'KillBot' bot-verification gate with 6 cross-domain redirects and a cross-origin POST beacon to an unranked host; no credential or payment forms, but the cloaking/redirect behaviour and attacker-flagged kill-bot references make it unsafe.

Risk Factors (6)

Deceptive 'prove you are not a robot' verification gate that acts as a cloaking/bot-filter layer rather than a genuine CAPTCHA

Cross-origin POST beacon from inline script to an unrelated unranked domain (10052024.ru)

Six cross-domain redirects in the navigation chain

Page scripts reference domains reported as attacker infrastructure (kill-bot.ru / kill-bot.net)

Obfuscation primitives (encoding/decoding functions) in inline scripts combined with a network sink

Page content unrelated to the hosting domain's apparent business, indicating compromise or repurposing

Safety Factors (6)

No forms of any kind: 0 password, 0 disguised-password, 0 payment fields — no credential or payment harvesting observed

No JavaScript malware patterns detected by YARA and no high-precision native YARA hits

No known malicious kit in the analyst-vetted kit roster

Domain is well established (2885 days / registered 2018), which is unusual for purpose-built phishing

Threat-intel matches are single-source, unverified, and categorized as generic abuse reputation rather than content malware

Established domain (2885 days old) with no strong malicious indicators — risk clamped from 7 to 5

Domain age information unavailable

Details

Page Title

User verification...

Scan Type

public

Favicon Hash

MMH3: -815199844

MD5: 7da211eb6ff78d1faaab6bcc491c95c9

Domain Name Analysis

The domain name 'santehkeram.ru' uses the Russian country-code top-level domain (.ru). The second-level label 'santehkeram' is 11 characters long split between four vowels and 7 consonants. Splitting it apart reveals four words: sante, hk, era, m. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.59s

Total Load Time

144 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:54%

Script:Latin

Direction:ltr

Detection Details

Text Length:285 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software62% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

62%

e-commerce shopping

60%

documentation technical

58%

news media journalism

45%

government public service

25%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	31.192.108.184	Moscow, Moscow, Russia	AS50867Hostkey B.v.
2	31.192.105.204	Moscow, Moscow, Russia	AS50867Hostkey B.v.
2	212.41.11.153	Moscow, Moscow, Russia	AS50340JSC Selectel
2	147.93.136.189	St Louis, Missouri, United States	AS40021Contabo Inc.
2	194.233.71.78	Singapore, Singapore	AS141995Contabo Asia Private Limited
2	87.250.250.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
2	190.115.31.218	United Arab Emirates	AS59692IQWeb FZ-LLC
2	77.88.21.119Yandex · CLOUD	Moscow, Moscow, Russia	AS13238YANDEX LLC
2	87.250.251.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
25	9	-	-