ScanMalware.com

Security Scan Report: actm.me

Redirected to:
https://picturesms.ru/#oops_44lw
Submitted: Sep 30, 2026, 8:02:55 AMCompleted: Sep 30, 2026, 8:03:55 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bc45513f-8906-4acd-8aef-10c7a0d4e2e8Domain and IP registration (RDAP)/api/v1/rdap/bc45513f-8906-4acd-8aef-10c7a0d4e2e8Certificate Transparency/api/v1/ct/picturesms.ruHow often this domain was scanned/api/v1/domain/stats/actm.meScan history for this domain/api/v1/domain/history/actm.me?limit=15

This website contacted 17 IPs in 4 countries across 14 domains to perform 64 HTTP transactions. The main domain is picturesms.ru and was registered 28 years ago.

Submitted URL: http://actm.me/44lw

Effective URL:

https://picturesms.ru/#oops_44lw
Redirected

AI Security Verdict

Low Risk

Confidence: 68%

2
Risk Score

Self-branded TeraSMS/Picture SMS link-shortener landing page. No credential or payment forms, no Indicators of Compromise, no YARA or Safe Browsing hits. Unranked final domain merits mild caution, but nothing malicious.

Risk Factors (2)
Final destination domain (picturesms.ru) has no Cisco Umbrella ranking and its age is not published; entry-domain age does not describe it
Page is an expired/invalid link landing page ('you ended up here') reached via a shortened link, which is confusing but not malicious
Safety Factors (5)
Entry domain actm.me is 2232 days old (established link-shortener infrastructure)
Content, branding and copyright consistently identify a real company (TeraSMS, 2011-2020)
No credential-harvesting or payment collection anywhere on the page
Third-party scripts (Google Analytics, JivoSite, Yandex Metrica) are top-ranked, ordinary SaaS/analytics
Cross-origin form action points to the service's own domain — not credential exfiltration
Domain age information unavailable

Details

Page Title

Сокращайте длинные ссылки в смс сообщениях, обогащайте ваш контент фото и заголовком

Scan Type

public

Domain Name Analysis

The domain name 'actm.me' uses the Montenegrin country-code top-level domain (.me) without a subdomain. The core label 'actm' covers 4 characters containing 1 vowel alongside 3 consonants. Word splitting yields 2 words: act, m. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://actm.me/44lw

Page Load Overview

7.50s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:2,302 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network60% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
60%
entertainment media
57%
technology software
50%
adult content
46%
finance banking
45%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1695.213.208.147St Petersburg, St.-Petersburg, Russia
AS49505JSC Selectel
395.213.208.149St Petersburg, St.-Petersburg, Russia
AS49505JSC Selectel
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
3142.251.13.97Google · CDNUnited States
AS15169Google LLC
3192.178.183.95Google · CDNUnited States
AS15169Google LLC
35.101.71.73Yerevan, Yerevan, Armenia
AS201589edgeam LLC
3185.93.109.142Russia
AS44128Internet-Pro LLC
377.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
3192.178.183.139Google · CDNUnited States
AS15169Google LLC
6417--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T153D2986084A9887B0153A1E3F0246B09ECB7DF7BEE234459B1FE17A93BD7C90C917568

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:+9LjMIIIC6ovOQHSIHSWCLHtLzAj9nBZqIII6dVe8Hr3tVT/81u5HrX0iXU/Y7dZ:+9LjMIIIC6ovOoSIHSWCLHtXqBQIII6X

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30767:cCBAAUR0CEspggCC1YOLSgdA7EygClTEIgwNKlDeBSgCqEAhQUFCgUQxzIsA8ID4AjgCUAKchURGgQQAwAC/VKSBhCkGEIQC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:9cc3633ccd3899cc
Difference Hash:324c323232322e72
Wavelet Hash:9ff39b9b9f990000
Color Hash:#ac539c

Other Hashes

Crop Resistant:82b0b2b68e8eae8a,324c323232322e72

Scan History

Scan history not available

Unable to load historical scan data