Security Scan Report: cyphermarket.ru

Submitted: Mar 21, 2026, 2:02:14 AMCompleted: Mar 21, 2026, 2:03:42 AMpubliccompleted
Loading additional data...

Summary

This website contacted 13 IPs in 3 countries across 10 domains to perform 52 HTTP transactions. The main domain is cyphermarket.ru and was registered NaN years ago.

Submitted URL: https://cyphermarket.ru/buy-gift-cards-online.php?_gl=1*fj7buj*_ga*MTg0ODA5NjQ0Ni4xNzc0MDU4MjM1*_ga_MLJ0X63F8X*czE3NzQwNTgyMzQkbzEkZzEkdDE3NzQwNTgyNDckajQ3JGwwJGgxMjExODcyNTc0

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Site impersonates Amazon to sell gift cards and illicit financial data; treat as a high‑risk fake shopping scam.

Risk Factors
Brand impersonation (Amazon branding on unrelated domain)
Offering stolen financial data and illicit services
Crypto payment collection on a suspicious marketplace
Unranked domain with brand claims
Domain age information unavailable

Details

Page Title

Cypher Market — даркнет-финансовые услуги

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

e-commerce shopping

(58%)

Domain Information

The domain 'cyphermarket.ru' uses the Russian country-code top-level domain (.ru). Count 12 characters in 'cyphermarket' split between 3 vowels and nine consonants. Word splitting yields 2 words: cypher, market. Expect 6 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cyphermarket.ru/buy-gift-cards-online.php?_gl=1*fj7buj*_ga*MTg0ODA5NjQ0Ni4xNzc0MDU4MjM1*_ga_MLJ0X63F8X*czE3NzQwNTgyMzQkbzEkZzEkdDE3NzQwNTgyNDckajQ3JGwwJGgxMjExODcyNTc0

Page Load Overview

1.60s
Total Load Time
52
HTTP Requests
10
Domains
1.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:3,315 chars
Detector Agreement:80%

Website Classification

Primary Category

e-commerce shopping58% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

e-commerce shopping
58%
entertainment media
55%
finance banking
41%
cryptocurrency blockchain
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4142.251.127.155United States
AS15169Google LLC
4142.250.187.195United States
AS15169Google LLC
4104.18.10.207United States
AS13335Cloudflare, Inc.
4142.251.127.97United States
AS15169Google LLC
489.42.231.10Netherlands
AS206264Amarutu Technology Ltd
4104.16.175.226United States
AS13335Cloudflare, Inc.
4212.102.56.179Frankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
4216.239.34.36United States
AS15169Google LLC
4104.17.25.14United States
AS13335Cloudflare, Inc.
4104.17.24.14United States
AS13335Cloudflare, Inc.
5213--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T155E3C940967A20BB29CA01EA26F29F267D7B8077954D51FCFE3C98A43FCD540265F42E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:6mnXM+PDEaDp1XDUFjm5NJrZAOTGSau7t0x8ADNX/xxt5jwck:6Yp1ZNWQ0xdZvPtV7k

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:154591:OgEYrEFMIJQhkADBBAgGiSgAq0GAAbFVDAo0T6KBIIWI4IKVoCDwtEJA5AKKYAWo0Qo6BcCZxPEUMBiB0ABgDiABIgFYSBJB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000267e26207e36
Perceptual Hash:826b3c6b96c16bb4
Difference Hash:71b1ccc8ccc1e4c4
Wavelet Hash:00003e7e3e787e7e
Color Hash:#1f9357

Scan History

Scan history not available

Unable to load historical scan data