ScanMalware.com

Security Scan Report: rabota-nazavode-panel.lol

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b7ac3ff1-4417-44f9-8612-0ef5ac7bc3a8Domain and IP registration (RDAP)/api/v1/rdap/b7ac3ff1-4417-44f9-8612-0ef5ac7bc3a8How often this domain was scanned/api/v1/domain/stats/rabota-nazavode-panel.lolScan history for this domain/api/v1/domain/history/rabota-nazavode-panel.lol?limit=15
This website contacted 4 IPs in 1 country across 2 domains to perform 8 HTTP transactions. The main domain is rabota-nazavode-panel.lol and was registered 6 months ago.

Submitted URL: https://rabota-nazavode-panel.lol

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Confirmed malicious Steam credential/account panel; primary domain flagged as stealer malware by multiple threat-intel sources and page collects passwords and Steam secrets.

Risk Factors (5)
Threat-intel primary-domain match for unknown stealer malware (2 independent feeds)
Multiple password and username fields indicating credential harvesting
Steam-branded account management panel on a non-official domain
Domain unranked in Cisco Umbrella
Page handles sensitive Steam secrets and 2FA codes
Domain age information unavailable

Details

Page Title

Sessions

Scan Type

public

Domain Name Analysis

Domain 'rabota-nazavode-panel.lol' uses the .lol top-level domain. Count 21 characters in 'rabota-nazavode-panel' split between 9 vowels and ten consonants; bonus characters include 2 hyphens. Breaking it apart gives seven words: ra, bota, naz, a, vo, de, panel. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rabota-nazavode-panel.lol

Page Load Overview

0.56s
Total Load Time
124 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:2,331 chars
Detector Agreement:67%

Website Classification

Primary Category

social_media70% confidence
Type: webapp
Method: structural

All Detected Categories

social_media
70%
forum
50%

Detected Features

Login Form
Search
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2104.21.17.213Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
2172.67.178.83Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
84--

Detected Technologies5

JQueryv3.7.1
100%
HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%
jQuery CDN
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T106F2686154F9167312E290C6BAF1AF0B3E91E653CA4B050032BD2EE50FD7C92DD97A36

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:froKfFGzxA02uKK3xOr6x1JNQp9cV+cJMvIP7MDRIO+frE3QcWKiKNKdLF/:frpNGzxA0vKfJ9cV+cSs7MDwiQcc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:37343:xiMdFA6CAEAidBzJgRppIBGMgQoD2kUAQIQxKyABlYkiMCEsQQFQCCCJGXYBXIEUgKgQWUAQSo5HCio4IJWIRKggAAA18QAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:03031f1f1f1f0f1f
Perceptual Hash:883733c9cc6399dc
Difference Hash:ffefb3f2b3f3efff
Wavelet Hash:01030f1f1f1f1f1f
Color Hash:#6ce0bd

Other Hashes

Crop Resistant:ffefb3f2b3f3efff

Scan History

Scan history not available

Unable to load historical scan data