Security Scan: https://api-direct.kult.wtf

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b05bb358-c99c-4c2b-b0bd-6c05f01fe361 Domain and IP registration (RDAP)/api/v1/rdap/b05bb358-c99c-4c2b-b0bd-6c05f01fe361How often this domain was scanned/api/v1/domain/stats/api-direct.kult.wtf Scan history for this domain/api/v1/domain/history/api-direct.kult.wtf?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is kult.wtf and was registered 4 months ago.

Submitted URL: https://api-direct.kult.wtf

AI Security Verdict

Low Risk

Confidence: 75%

Risk Score

Bare JSON API endpoint returning a service status object (kult-gateway ok). No forms, no branding, no threat-intel, YARA or IDS hits. Unranked 138-day domain, but no concrete malicious signal — low risk.

Safety Factors (4)

No credential or payment form present (verified form facts: 0 password, 0 payment fields)

No Indicators of Compromise, YARA, Safe Browsing or IDS hits

No cross-origin requests or credential exfiltration; all scripts same-origin and none were detected

No brand impersonation — the JSON names only an internal service identifier

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'api-direct.kult.wtf' on the .wtf top-level domain and includes subdomain 'api-direct'. Its registrable label 'kult' stretches across 4 characters split between one vowel and 3 consonants. Tokenizing the label suggests 2 words: kul, t. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.12s

Total Load Time

0 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:100%

Script:Latin

Direction:ltr

Detection Details

Text Length:40 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism50% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism

50%

government public service

43%

documentation technical

42%

healthcare medical

41%

entertainment media

39%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	194.87.141.3	Frankfurt am Main, Hesse, Germany	AS198071Berch Solutions Limited
2	1	-	-

Detected Technologies3

Python

50%

Uvicorn

40%

HTTP/3

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13DD02276C5A000167176ABECCD82A2188FCDBA09D5360E82B3C8E4A0C9DB95AC403A80

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3:qVZxVsws+7L9Hv8+5BuFJYkAK3BbZ6iL3YwA4NblYsmS8K4FLfRRyIdlEbXItKB4:qzxV/5VHHQYk/B96kYal5mNdxELa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:46191e9db5c9e640358c934415540057

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff

Perceptual Hash:87070f0f0f0f0f1f

Difference Hash:c000000000000000

Wavelet Hash:00fff0f0f0f0f0f0

Color Hash:#8a1f93

Other Hashes

Crop Resistant:c000000000000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: api-direct.kult.wtf