ScanMalware.com

Security Scan Report: ios18.nfmqsvva.sbs

Submitted: Oct 12, 2026, 4:21:55 PMCompleted: Oct 12, 2026, 4:22:33 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 85%

9
Risk Score

Four CRITICAL IDS signatures flag this host as an iOS exploit-kit delivery chain (Darksword EK landing/loader/worker/module). Placeholder content masks malicious traffic; do not visit on any iOS device.

Risk Factors (4)
Multiple CRITICAL IDS alerts for an active exploit kit (Darksword iOS EK) — exploit kit activity detected
Suspicious throwaway hostname (random alphanumeric .sbs domain) impersonating an iOS-themed target
Domain has no reputation ranking; no legitimate content or branding
Page body contains only a placeholder 'Test Page' while serving exploit-kit network traffic
Domain age information unavailable

Details

Page Title

Test Page

Scan Type

public

Domain Name Analysis

The domain name 'ios18.nfmqsvva.sbs' uses the .sbs top-level domain and includes subdomain 'ios18'. Count 8 characters in 'nfmqsvva' containing one vowel alongside 7 consonants. Segmentation suggests four words: n, fm, qs, vva. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ios18.nfmqsvva.sbs/

Page Load Overview

2.05s
Total Load Time
24 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:9 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6165.154.241.64Dubai, Dubai, United Arab Emirates
AS142002Scloud Pte Ltd
61--

Detected Technologies1

HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17D11007F9872420D8015934C3AB1E58C2895819E7712852030F9B8183FFDB54B51BBAD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hRB5C0IpAll1untwOdoFFs88ifn4QrdoJBi0Zb4sXj:TBrVlegFsu1WzZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:914:AAAAAQEAAAAAAAEAAAAAAAAggAAAAAAACAEAAoAAEAAAAAEAAAAAAAAACAACAAAAAAAAAAAgIAAAAAIAAAAAACACiIAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data