ScanMalware.com

Security Scan Report: yad2.install-app-android.pro

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7d99e6d6-63c2-46f4-b659-1cd4db585b79Domain and IP registration (RDAP)/api/v1/rdap/7d99e6d6-63c2-46f4-b659-1cd4db585b79How often this domain was scanned/api/v1/domain/stats/yad2.install-app-android.proScan history for this domain/api/v1/domain/history/yad2.install-app-android.pro?limit=15
This website contacted 2 IPs in 1 country across 1 domain to perform 6 HTTP transactions. The main domain is install-app-android.pro and was registered 1 week ago.

Submitted URL: https://yad2.install-app-android.pro

AI Security Verdict

Confirmed Scam

Confidence: 94%

9
Risk Score

Confirmed malware distribution: a 4-day-old look-alike of Yad2 flagged by Safe Browsing that pressures visitors to sideload an APK while posing as the official delivery app. Do not download.

Risk Factors (5)
Google Safe Browsing malware detection on the served content
Impersonation of the Yad2 brand on a non-official, throwaway-looking domain
APK sideloading instructions used to push an app outside official app stores
Domain registered 4 days ago and absent from top-1M rankings
Fabricated app-store-style listing with copied review and download statistics
Domain age information unavailable

Details

Page Title

Yad2 Delivery

Scan Type

public

Domain Name Analysis

Within the .pro top-level domain, 'yad2.install-app-android.pro' is registered with subdomain 'yad2'. The core label 'install-app-android' covers 19 characters holding 6 vowels versus eleven consonants, plus 2 hyphens. Word splitting yields three words: install, app, android. Expect seven characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Yad2 Delivery 9 Yad2 Delivery Contains ads + In-app purchases 48x a 1M+ 128K reviews © Everyone Downloads Track in Real-Time Fotiow your courier’ prog Anyt! Simple. fast, and secure About this...

Page Load Overview

0.77s
Total Load Time
564 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,126 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software89% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
89%
e-commerce shopping
84%
government public service
59%
cryptocurrency blockchain
57%
finance banking
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
62--

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12953F79455F70131447342991FEB7B5B37A1A403CA4AF5117BDD62288F8A8DEE4B32AC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:sjp1FWFVyvoYggggHbh9Zynzs/OfKCFGpNl9PSqPgcv9dE6An:y1Q/yvoybh9ZyKOfXFGpNl9PSqIcvAHn

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:66160:iuUKE4AQYBGbEGqRIDCUAKDCLEDDAg8AISMGg4OrgRMJpARFIDVoDfOKIC4wgB5UcmFCaAB2JBDBBCYQIchweqXWIkNgqABJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:efe7e7e7e7efe7e7
Perceptual Hash:b373998866333366
Difference Hash:184c4c4d4d0c0c0c
Wavelet Hash:22220000e0e0e0e0
Color Hash:N/A

Other Hashes

Crop Resistant:184c4c4d4d0c0c0c,0008123232120c10

Scan History

Scan history not available

Unable to load historical scan data