ScanMalware.com

Security Scan Report: weex168.ru

Site favicon
Submitted: Oct 6, 2026, 7:28:14 AMCompleted: Oct 6, 2026, 7:29:08 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/687e54bd-2230-4eac-86f4-ec3f6282a0beDomain and IP registration (RDAP)/api/v1/rdap/687e54bd-2230-4eac-86f4-ec3f6282a0beCertificate Transparency/api/v1/ct/weex168.ruHow often this domain was scanned/api/v1/domain/stats/weex168.ruScan history for this domain/api/v1/domain/history/weex168.ru?limit=15

This website contacted 53 IPs in 7 countries across 29 domains to perform 382 HTTP transactions. The main domain is weex168.ru and was registered 18 years ago.

Submitted URL: https://weex168.ru

The Cisco Umbrella rank of the primary domain is #940,490 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 66%

3
Risk Score

Page claims to be the WEEX exchange but runs on non-official weex168.ru, offers an APK download from a CloudFront host, links to a phishing-flagged domain and chains 6 cross-domain redirects — treat as brand-impersonation/malware risk.

Risk Factors (4)
Brand impersonation of WEEX on a non-official domain (weex168.ru)
Direct APK download link served from a third-party CloudFront host instead of official app stores
Outbound link to a domain with an unverified phishing threat-intel report
Excessive cross-domain redirect chain (6 redirects)
Safety Factors (5)
Domain registered ~370 days ago (established, no auto-escalation from age)
No credential/payment forms parsed on the captured DOM (0 password, 0 payment, 0 total forms)
No JavaScript YARA malware patterns and no known malicious kit in the roster
Most third-party script hosts are ranked in the top 1M; loaded media.weex.com and a fraud-detection service
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 3
Domain age information unavailable

Details

Page Title

WEEX | Crypto, Stocks, Gold & Global Markets

Scan Type

public

Domain Name Analysis

The domain name 'weex168.ru' uses the Russian country-code top-level domain (.ru) with no subdomain. Count 7 characters in 'weex168' holding 2 vowels versus two consonants; it also includes three digits. Tokenizing the label suggests 3 words: we, ex, 168. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://weex168.ru

Page Load Overview

10.63s
Total Load Time
18.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,035 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain60% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
60%
corporate
25%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18138.113.69.130Meteverse · CDNFrankfurt am Main, Hesse, Germany
AS54994Meteverse Limited.
7180.97.198.41China
AS140292CHINATELECOM Jiangsu province Suzhou 5G network
718.66.92.123Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
743.159.95.211Singapore
AS139341ACE
7216.198.53.3Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
7142.251.14.94Google · CDNUnited States
AS15169Google LLC
7216.198.54.3Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
735.78.54.195Aws · CLOUDTokyo, Tokyo, Japan
AS16509Amazon.com, Inc.
7142.251.127.84Google · CDNUnited States
AS15169Google LLC
723.50.131.13Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
38253--

Detected Technologies5

Open-Graph-Protocolvwebsite
100%
Zendesk
20%
Yandex.Metrika
20%
Google Sign-in
20%
Apple Sign-in
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T169E4C41AB10DDE15D872DD4DF57EAEBAA08DF07686F05438F39CCD5902E14B817AB882

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:4fkPlSG1LGCS4L2wXn5kXgzKix65VO9zES2/:40ltLGUtLKqr94Z/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:668193:heQIJDrSGImE8rBhLVXSGVBBSZsVkYuIcoRAAHgwmASEAKDBXIBESAEIAEIAcBUgOgQLHSQQ0QrZOUhYhDkBCeZhwV6qhDAk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c3c000018330337
Perceptual Hash:8fda9b8f52216625
Difference Hash:696802586262dee7
Wavelet Hash:bd3c00003f3b0f7f
Color Hash:#d23d2d

Other Hashes

Crop Resistant:585ae1cc8ca4a4ec,a0d082327282d0a0,a280c0969680a2a2,a2aa864c4c8282a2,696802586262dee7

Scan History

Scan history not available

Unable to load historical scan data